documentation by encod3d-sec
Walkthrough auto-assembly encod3d-sec/walkthrough
Assemble a report-ready walkthrough.md for a SOLVED engagement - populate the Evidence gallery from the poc/ images captured during the engagement, and draft the step-by-step reproduction from state/loot/log (Killchain.md for pentest/bugbounty, state.md's Chain/Status for ctf) without fabricating. Use when asked to "write the walkthrough", "assemble the walkthrough", "close out the box/engagement", or at close-out once an engagement is marked SOLVED.
Install linked skill Links this skill to your agents and keeps it current with the author's updates.
Fork editable copy Install locally · CLI or SKILL.md 1 · One-time — install the CLI (
docs ↗ )
$ pip install decimalaiCopy
2 · Get the skill — writes .claude/skills/encod3d-sec-walkthrough/SKILL.md
$ decimalai skills pull encod3d-sec-walkthrough --out .claude/skills/Copy
Copy link Copy README badge Copy SKILL.md No CLI? Get the same file — curl · raw file $ curl -fsSL --create-dirs -o .claude/skills/encod3d-sec-walkthrough/SKILL.md https://app.decimal.ai/s/encod3d-sec-walkthrough/SKILL.mdCopy
Code scan Clean Intent Passed Content Clean
Overview Benchmark Contents Activity Versions 1 Ratings 0
Benchmark snapshot Same tasks, with and without this skill.
View full report → Model gemini-3.6-flashMeasured 10/10/2026 v1
Pass-rate lift +67 pp percentage-point change
Pass rate with skill 90% 24% without skill
Tokens +38% vs. without skill
Agent turns 0% vs. without skill Usage All-time distinct users and times used, across every version.
View activity → Read the skill SKILL.md · instructions and conventions
Open contents → Safety and source details
SkillSafety ✓ 3 of 3 passed ✓ Code scan 15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v5 — 9/14/2026
View 15 scanner checks live_secret remote_code_execution reverse_shell data_exfiltration ssrf_metadata agent_snooping anti_refusal destructive_commands obfuscated_unicode unicode_homoglyph opaque_blob suspicious_url tool_overreach trigger_abuse prompt_injection_phrasing
✓ Intent Safe
LLM judge · does the skill do what it claims
✓ Content Clean
LLM judge · policy & harmful-content review
Source Imported License MITImported 9/14/2026Version v1