mcpbeat

Yara Rule Authoring

christophacham/yara-rule-authoring

> Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false IOC, signature, crx module, dex module.

39k tokens
context cost
the whole folder, loaded on every use
16
files
ships runnable scripts
1
copies elsewhere
how many repositories repackaged it
73
stars on the repo
on the repository, not the skill itself

Install

one command, takes just this skill from the repository 
npx skills add https://github.com/christophacham/agent-skills-library --skill yara-rule-authoring

Repackaged in 1 other repositories

same content, different owner
trailofbits/skills open on GitHub →

How to use it

Copy the folder

Take christophacham/yara-rule-authoring from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.

Install what it needs

The instructions reference brew, cargo, go. Without those the skill loads but fails at the first command.