Yara Authoring

Plugin Active

YARA-X detection rule authoring with linting and quality analysis

1 Skill 0 MCPs

Purpose

To empower users to write high-quality, efficient, and accurate YARA-X detection rules by providing expert guidance, analysis tools, and best practices.

Features

Expert YARA-X rule authoring guidance
Rule linting and quality analysis
String quality evaluation
YARA-X migration support
Analysis of Chrome extensions and Android DEX files

Use Cases

Writing new YARA-X rules for malware detection
Reviewing and optimizing existing YARA rules
Converting threat intelligence into detection signatures
Debugging false positive issues in YARA rules

Non-Goals

Static analysis requiring disassembly
Dynamic malware analysis
Network-based detection
Memory forensics

Trust

warning:Issues Attention13 issues opened and 4 closed in the last 90 days indicates a low closure rate (24%), suggesting maintainers are slow to respond to open issues.

Installation

First, add the marketplace

/plugin marketplace add trailofbits/skills

/plugin install yara-authoring@trailofbits

Contains 1 extensions

Skill (1)

Yara Rule Authoring Skill

Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive reduction. Triggers on: YARA, YARA-X, malware detection, threat hunting, IOC, signature, crx module, dex module.

Quality Score

77 /100

Analyzed about 12 hours ago

Trust Signals

Last commit3 days ago

GitHub owner trailofbits

Stars5.2k

LicenseCC-BY-SA-4.0

Status

View Source

Similar Extensions

Dotforge Stack Python Fastapi

100

Python 3.12+ with FastAPI, async/await, type hints, and Ruff linting rules for Claude Code.

Plugin

luiseiman

Karpathy Coder

100

Active coding discipline enforcer based on Karpathy's 4 principles: surface assumptions, keep it simple, make surgical changes, define verifiable goals. Ships 4 Python tools (complexity_checker, diff_surgeon, assumption_linter, goal_verifier), a review agent, /karpathy-check slash command, and a pre-commit hook. All tools stdlib-only.

Plugin

alirezarezvani

Skill Optimizer

Analyze and optimize your Agent Skills (SKILL.md) using session data and research-backed static checks. Works with Claude Code, Codex, and any Agent Skills-compatible agent.

Plugin

hqhq1025

Python Development

Modern Python development with Python 3.12+, Django, FastAPI, async patterns, and production best practices

Plugin

wshobson

Skills Janitor

7 skill hygiene tools: audit, health report, auto-fix, usage tracking, token cost analysis, GitHub search, and pre-install overlap check.

Plugin

khendzel

AgentLint

Check how well your repo supports AI coding agents.

Plugin

0xmariowu