TheBotique

元鉴 yotta-triage

元鉴 —— 跨智能体的恶意样本静态初筛技能:零依赖自研对文件 / 目录做纯静态分析(MD5/SHA1/SHA256 哈希、魔数类型识别、Shannon 熵、可打印字符串分类提取、PE/ELF 头解析),输出 triage 报告 + IOC(hash/URL/域/IP/邮箱)供元情消费;只提示可疑、不定性恶意。触发:用户给出可疑文件 / 恶意样本 / 样本目录,要算哈希、识别文件类型、查熵、提取字符串、解析 PE/ELF 头、做静态初筛、产出 IOC 时。边界:只做静态特征,不反混淆、不解包、不动态执行任何样本;不联网查证;仅用于已获授权 / 自有资产 / 教学环境的安全分析。

as observed 2026-10-02T07:46:18.975Z
Identifier
yotta-triage
Source
ClawHub
Version observed
0.1.4
Source repository
not published
Repository observation
No source repository listed
First observed here
2026-08-28T22:06:28.212Z
Observations recorded
5
Installs (reported upstream)
1
Weekly downloads (upstream)
461
Declared license
MIT-0

Observation history

2026-10-02T07:46:18.975Z

Fields that differed: changelog latestVersion

FieldBeforeAfter
changelog "- Added slug and displayName fields; improved summary and structured tags in SKILL.md.\n- Updated usage instructions: --no-strings option now clearly shows when string extraction "- Added `category: it-ops-security` to skill metadata.\n- Removed outdated `skill-card.md` documentation file.\n- Updated version to 0.1.4 and revised documentation (README, SKILL
latestVersion "0.1.3" "0.1.4"
2026-09-19T21:21:32.220Z

Fields that differed: license changelog description latestVersion

FieldBeforeAfter
license null "MIT-0"
changelog "- Removed the file skill-card.md.\n- No other changes to the code or documentation." "- Added slug and displayName fields; improved summary and structured tags in SKILL.md.\n- Updated usage instructions: --no-strings option now clearly shows when string extraction
description "元鉴 —— 跨智能体的恶意样本静态初筛技能:零依赖自研对文件 / 目录做纯静态分析(MD5/SHA1/SHA256 哈希、魔数类型识别、Shannon 熵、可打印字符串分类提取、PE/ELF 头解析),输出 triage 报告 + IOC(hash/URL/域/IP/邮箱)供元情消费;只提示可疑、不定性恶意。触发:用户给出可疑文件 / 恶意样本 / 样本目 null
latestVersion "0.1.2" "0.1.3"
2026-09-03T07:20:35.503Z

Fields that differed: changelog latestVersion topics

FieldBeforeAfter
changelog "- Bumped version to 0.1.1.\n- Documentation updates: improved and expanded README and SKILL.md for clarity.\n- Removed outdated file skill-card.md.\n- Minor code and spec document "- Removed the file skill-card.md.\n- No other changes to the code or documentation."
latestVersion "0.1.1" "0.1.2"
topics ["security"] ["ELF分析","PE分析","恶意样本分析","文件哈希","静态分析"]
2026-08-29T23:02:09.653Z

Fields that differed: changelog latestVersion

FieldBeforeAfter
changelog "Initial release of yotta-triage — cross-agent static triage for suspicious or malicious files.\n\n- Pure static analysis tool: MD5/SHA1/SHA256 hashes, file type recognition, entro "- Bumped version to 0.1.1.\n- Documentation updates: improved and expanded README and SKILL.md for clarity.\n- Removed outdated file skill-card.md.\n- Minor code and spec document
latestVersion "0.1.0" "0.1.1"

Correction

If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.