# mrhlaingbwardev/agentic-hacking-skills > Bonus repository for the 'Agentic Hacking' ebook: 28 SKILL.md templates, a web-pentest agent, and MCP configs for OpenCode. Intended for authorized security testing with AI agents. - Magnitude: 1.3 out of 10 — Cooling - Stars: 348 total · +0 stars measured 2026-11-09, 00:09–02:15 UTC, ≈ 1 by evening - Star trust: unusual star pattern (heuristic) - Category: Security · Language: JavaScript · Created: 2026-11-01 · Last push: 2026-11-01 - GitHub: https://github.com/mrhlaingbwardev/agentic-hacking-skills · Page: https://gitnova.dev/en/r/mrhlaingbwardev/agentic-hacking-skills ## Useful for - Wire SKILL.md templates and MCP configs into OpenCode for web security tasks - Run the web-pentest agent for authorized testing of a site - Build a custom agent skill set from the 28 provided templates ## Why it’s here - Star-counter measurements on 2026-11-09 (UTC), 00:09–02:15: 348 → 348 stars (+0). This is the change over that interval. - The repository is 8 days old and already has 348 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet. - About 280 forks a day — people are taking the code. ## Star trust Unusual star pattern (heuristic). - Stars arrived in one batch on a single day (343) and stopped right after: 3 over the next two days. Real interest usually fades gradually. Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer. ## Numbers - Forks: 58 - Issues and pull requests: 0 - Watchers: 345 - Average over the last week: 50 per day - Usual pace: too little history (under two weeks) - Stars in the last hour (measured): 0 ## Stars per day, last 9 days (oldest → newest, today is partial) 2026-11-01 … 2026-11-09: 0, 1, 0, 0, 343, 0, 3, 1, 0 ## Magnitude by day, last 4 days 11-06 7.0, 11-07 1.8, 11-08 1.7, 11-09 1.3 ## More in this category 1. **sherlock-project/sherlock** — 9.2 · Breakout · Security · Python · +387 stars measured 2026-11-09, 00:02–02:08 UTC, ≈ 2,900 by evening Python CLI tool that hunts down accounts by one or more usernames across 400+ social networks. Used in OSINT and reconnaissance to check a user's online presence. Full card: https://gitnova.dev/en/r/sherlock-project/sherlock.md 2. **reacher-z/Awesome-REA** — 6.6 · Breakout · Security · Python · +23 stars measured 2026-11-09, 00:02–02:09 UTC, ≈ 308 by evening An independent curated collection of reverse-engineering tools, case studies and research papers covering websites, games, apps, native binaries, firmware and protocols. It indexes 3,300+ resources and organizes them by target and task. Full card: https://gitnova.dev/en/r/reacher-z/Awesome-REA.md 3. **Torquatoatkins/Drainer-Tool-Solana** — 5.9 · Early signal · Security · Python · +0 stars measured 2026-11-09, 00:02–02:09 UTC, ≈ 130 by evening A tool that automatically drains SOL and SPL tokens from Solana wallets: it monitors balances via RPC websocket and transfers funds to a specified address. The author states it is for educational and research purposes only. Full card: https://gitnova.dev/en/r/Torquatoatkins/Drainer-Tool-Solana.md 4. **vsmutok/FuckCaptcha** — 5.6 · Early signal · Security · HTML · +6 stars measured 2026-11-09, 00:04–02:09 UTC, ≈ 78 by evening Open field guide to 39 CAPTCHA types: identification signals, free and open-source bypass methods, and paid alternatives, with a searchable web version. Intended for education and authorized research. Full card: https://gitnova.dev/en/r/vsmutok/FuckCaptcha.md 5. **qybaihe/bla** — 5.3 · Breakout · Security · TypeScript · +55 stars measured 2026-11-09, 00:02–02:09 UTC, ≈ 738 by evening BLA (Blind LLM Agents) is a defensive tool that poisons release artifacts (binaries, Electron/ASAR, JS bundles, Python, WASM, models, SQLite) so AI reverse-engineering agents hit resource budgets, follow decoys, and burn tokens while… Full card: https://gitnova.dev/en/r/qybaihe/bla.md --- Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score. Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast. Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself. Data as of 2026-11-09 02:18 UTC, updated every 30 minutes.