re-sample-acquire
100 / 100 · Low risk
Fine to try.
样本现场采集(从现象到可用样本):目标没有独立进程、样本不落盘时,以「异常执行内存 + 到达该内存的执行上下文」为核心定位载体并运行时提取。 覆盖四种观测模型:Windows(VAD/线程/ETW)、Linux(VMA/BPF LSM)、macOS(Mach VM/Endpoint Security)、seL4(capability provenance)。 触发词:样本获取、现场采集、没有样本、只有现象、不落盘、无文件、注入、内存马、运行时捕获、内存提取样本。 English triggers: sample acquisition, live acquisition, no sample, fileless, injected code, memory-resident, runtime capture.
What this skill can do
We found nothing in the files we read that matches our rules. That does not prove the skill is safe: see the limits of static scanning.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'re-sample-acquire' ] || [ -L ~/.agents/skills/'re-sample-acquire' ]; then echo 'A skill folder named re-sample-acquire already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/dslsdzc/rev-skills' "$d" && git -C "$d" checkout --quiet '1977504515d3f5fa8889da43974feb7a0f4eaab9' -- '.claude/skills/re-sample-acquire' && mkdir -p ~/.agents/skills && cp -R "$d"/'.claude/skills/re-sample-acquire' ~/.agents/skills/'re-sample-acquire' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'re-sample-acquire' ~/.claude/skills/'re-sample-acquire' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/dslsdzc/rev-skills/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-07 | 1977504 | 100 |