distill-skill

Extract offensive security techniques from reports into structured SKILL.md files.

6|1|Updated Mar 9, 2026
One-click install
npx skills add https://github.com/securityfortech/hacking-skills --skill distill-skill
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: distill-skill
Source: https://github.com/securityfortech/hacking-skills/tree/main/skills/meta/distill-skill
Command: npx skills add https://github.com/securityfortech/hacking-skills --skill distill-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill transforms raw security content from various sources into structured, reusable Skill Units, enabling AI agents to learn and apply new offensive techniques.

Core Features & Use Cases

  • Knowledge Extraction: Parses bug reports, walkthroughs, pentest reports, and blog posts to identify transferable security techniques.
  • Skill Generation: Automatically generates a SKILL.md file for each identified technique, following a defined structure.
  • Use Case: A security researcher shares a detailed write-up of a novel SQL injection bypass. This Skill processes the write-up and generates a new skills/web/injection/sql-injection-bypass/SKILL.md file, making the technique available for AI agents to use.

Quick Start

Use the distill skill to extract a new skill from the provided bug report.

Frequently Asked Questions about distill-skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract reusable offensive security techniques from bug reports and pentest findings?▼

You can distill raw security content like bug reports and pentest findings into structured SKILL.md files. This extracts actionable offensive security techniques and generates reusable AI hunting methodologies.

What is the best way to transform CTF writeups into structured AI hunting methodologies?▼

The best way to transform CTF writeups is to distill the raw security content into structured SKILL.md files. This process extracts the technique name, signals, methodology, and payloads to create actionable AI hunting methodologies.

Can I use security blogs to generate structured skills for AI agents?▼

Yes, you can use security blogs to generate structured skills for AI agents. The distillation process parses blog posts to identify transferable security techniques and automatically generates a structured SKILL.md file for each.

What specific output format is required when generating a SKILL.md file for security automation?▼

Generating a SKILL.md file for security automation requires a specific output format. The structure must include the technique name, description, signals, methodology, and payloads to ensure actionable knowledge distillation.

Does knowledge distillation from security writeups require any specific dependencies?▼

Knowledge distillation from security writeups requires no specific dependencies. The process extracts reusable offensive security knowledge directly from diverse sources into structured SKILL.md files without external components.