Acquire, analyze, and extract artifacts from memory dumps for incident response and malware analysis.
Create detailed user stories, acceptance criteria, and feature specs
Example: Generate user stories for 'password reset feature' with acceptance criteria, edge cases, and test scenarios
Reduce spec writing time by 50%, ensure comprehensive coverage
Research competitors, compare features, identify gaps
Example: Analyze 5 competitor products, create feature comparison matrix, suggest differentiation opportunities
Complete competitive research in 2 hours instead of 2 days
Evaluate features using frameworks (RICE, ICE, Kano) and create prioritized backlogs
Example: Score 20 feature ideas using RICE framework, generate prioritized roadmap with rationale
Make data-driven prioritization decisions faster
Draft PRDs, status updates, and stakeholder presentations
Example: Create executive summary of Q3 roadmap, monthly progress report, feature launch announcement
Save 3-5 hours/week on communication overhead
Submit your Claude Code skill and start earning
epx add wshobson/agents --skill memory-forensicsCompatible with
Supported agents
Supports live memory acquisition across Windows (WinPmem, DumpIt), Linux (LiME, /dev/mem), and macOS (osxpmem), plus virtual machine memory from VMware, VirtualBox, QEMU, and Hyper-V
Volatility 3 framework with 30+ plugins covering process analysis, network connections, DLL inspection, code injection detection, registry analysis, and file system artifacts
Includes malware analysis an
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versionmemory-forensicsExecute the skills CLI command in your project's root directory to begin installation:
epx add wshobson/agents --skill memory-forensicsFetches memory-forensics from wshobson/agents and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/memory-forensics
Restart Cursor to activate memory-forensics. Access via /memory-forensicsin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Time estimate: 30-60 minutes to see productivity improvements
Prerequisites
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use for user story writing, competitive research, roadmap prioritization, stakeholder communication, and PRD drafting. Best for reducing repetitive documentation and research work.
✗ Avoid when
Avoid for strategic product vision (requires deep customer empathy), pricing decisions (needs market and financial expertise), or when face-to-face customer discovery is more valuable than speed.
travel-planner
ailabs-393/ai-labs-claude-skills · Productivity · same category
prd-to-plan
mattpocock/skills · Productivity · same category
network-engineer
404kidwiz/claude-supercode-skills · Productivity · same category
cmux-browser
manaflow-ai/cmux · Productivity · same category
modly-image-to-3d
aradotso/trending-skills · Productivity · same category
pine-developer
traderspost/pinescript-agents · Productivity · same category
Useful defaults in memory-forensics — fewer surprises than typical one-off scripts, and it plays nicely with `npx skills` flows.
memory-forensics is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
I recommend memory-forensics for anyone iterating fast on agent tooling; clear intent and a small, reviewable surface area.
memory-forensics fits our agent workflows well — practical, well scoped, and easy to wire into existing repos.
memory-forensics reduced setup friction for our internal harness; good balance of opinion and flexibility.
memory-forensics fits our agent workflows well — practical, well scoped, and easy to wire into existing repos.
We added memory-forensics from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
Registry listing for memory-forensics matched our evaluation — installs cleanly and behaves as described in the markdown.
Solid pick for teams standardizing on skills: memory-forensics is focused, and the summary matches what you get after install.
memory-forensics reduced setup friction for our internal harness; good balance of opinion and flexibility.
showing 1-10 of 55