reverse-skills-max: initial public release (restored, redacted, hardened)

vendor-new/malware-analysis-claude-skills/.github/workflows/mirror.yml

@@ -0,0 +1,23 @@
+name: Mirror to Codeberg
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '30 0 * * 0'
+  push:
+    branches: [main]
+jobs:
+  codeberg:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+      - name: Configure Git
+        run: |
+          git config --global user.name "GitHub Actions"
+          git config --global user.email "actions@github.com"
+      - name: Mirror repository
+        run: |
+          git remote add codeberg https://gl0bal01:${{ secrets.CODEBERG_TOKEN }}@codeberg.org/gl0bal01/malware-analysis-claude-skills.git || true
+          git push codeberg --all --force
+          git push codeberg --tags --force

vendor-new/malware-analysis-claude-skills/.github/workflows/test.yml

@@ -0,0 +1,18 @@
+name: Test skills toolchain
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+  pull_request:
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Install analysis dependencies
+        run: pip install pefile yara-python sigma-cli pysigma-backend-splunk pysigma-pipeline-sysmon
+      - name: Run end-to-end test harness
+        run: bash tests/run.sh