Kadath Ward

Automattic/KadathSandbox/.claude/skills/kadath-ward

ai-mlOfficial

Official Provider SkillView repo

Use when operating, starting, resetting, snapshotting, self-testing, or troubleshooting the KadathSandbox WordPress malware sandbox at /Users/fioa8c/WORK/KadathSandbox — bringing the stack up, fixing a failing self-test or a container that will not come healthy, and understanding the containment model so you never weaken it to make a sample run.

Files1 files

SKILL.md57 lines

Loading editor…

Install

Recommended

One command — your agent picks it up automatically.

Select AI agent

Select an AI agent above to see the install command.

Manual Install

More steps

Download the file and paste it into your agent's system prompt.

Skill details

Versionv1.0.0

AuthorAutomattic

Categoryai-ml

Skill IDAutomattic/KadathSandbox/.claude/skills/kadath-ward

Related skills

Kadath GauntUse when you need OS-level evidence — syscalls, spawned processes with argv, file opens, raw connect() calls — from a WordPress sample running in KadathSandbox at /Users/fioa8c/WORK/KadathSandbox, rather than PHP-level Xdebug traces. Covers attaching strace and bpftrace to php-fpm via the tracer sidecar during a trigger.Kadath OfferUse when offering, running, executing, or "seeing what it does" for an untrusted WordPress plugin, theme, webshell, dropper, or loose PHP sample in the KadathSandbox sandbox at /Users/fioa8c/WORK/KadathSandbox — staging the sample, triggering it so its behaviour is traced, and marking the run so the artifacts can be attributed to it. Hands off to kadath-scry for the report.Kadath ScryUse when analysing, triaging, reporting on, or writing up what a WordPress sample did after it was offered in KadathSandbox at /Users/fioa8c/WORK/KadathSandbox — reading the run's Xdebug traces, Snuffleupagus log, decrypted flows, DNS, drop log, and database changes into a report with IOCs and a draft YARA rule. Follows kadath-offer.Fix E2e TestsGiven a wp-calypso PR number, identify the failing E2E test(s) in that PR's CI run so they can be fixed. Use when asked to investigate or fix a failing E2E test on a specific PR.Setup ClaudeSet up Claude Code for this project. Use when the user invokes /setup-claude, asks to "set up claude", or "create the skills symlink".Setup ClaudeSet up Claude Code for this project. Use when the user invokes /setup-claude, asks to "set up claude", or "create the skills symlink".