What is a subagent-driven workflow?

It uses specialized AI models to handle data-heavy tasks like parsing large logs or network captures in the background, keeping your main interaction with Claude focused and efficient.

Can this skill help me document an undocumented API?

Yes, by analyzing network captures (HAR/curl) and automatically generating OpenAPI specifications through its protocol investigation mode.

Does it save my progress during long investigations?

Yes, the skill uses persistent state management, allowing you to pause an investigation and resume exactly where you left off later.

What types of systems can I investigate?

You can investigate network protocols, software features, legacy codebases, historical git decisions, and complex binary or data formats.

Forensics Investigation

Name: Forensics Investigation
Author: designnotdrum

bydesignnotdrum

•

Security & Testing

Orchestrates multi-phase reverse engineering workflows to decode black-box systems, APIs, and unfamiliar codebases using specialized subagents.

About

The Forensics Investigation skill provides a structured framework for deep-dive software analysis and reverse engineering. By leveraging a subagent-driven architecture, it performs data-heavy operations like HAR file parsing and OpenAPI spec generation using background agents to keep your primary conversation context clean. Whether you are documenting a defunct API, replicating a competitor's feature, or performing 'git archaeology' on legacy code, this skill provides context-aware guidance and persists your investigation state across sessions for seamless complex problem-solving.

Key Features

Subagent-driven data analysis for processing large network captures and HAR files.
Multi-mode workflows tailored for protocols, features, codebases, and file formats.
1 GitHub stars
Automated OpenAPI specification generation from raw traffic data.
Context-aware implementation guidance based on your specific technology stack.
Persistent investigation state management to resume complex tasks at any time.

Use Cases

Analyzing legacy codebases to understand the reasoning behind specific historical design decisions.
Decoding and documenting an undocumented or defunct API to build a compatible client.
Reverse engineering a competitor's software feature to understand its architectural patterns.

About

Key Features

Subagent-driven data analysis for processing large network captures and HAR files.
Multi-mode workflows tailored for protocols, features, codebases, and file formats.
1 GitHub stars
Automated OpenAPI specification generation from raw traffic data.
Context-aware implementation guidance based on your specific technology stack.
Persistent investigation state management to resume complex tasks at any time.

Use Cases

Analyzing legacy codebases to understand the reasoning behind specific historical design decisions.
Decoding and documenting an undocumented or defunct API to build a compatible client.
Reverse engineering a competitor's software feature to understand its architectural patterns.