thor-skills — LLM workflow management thor-skills, thor-skill, community, LLM workflow management, ide skills, reproducible commands, explicit paths, forensic analysis, lab workflows, THOR flags

v1.0.0
GitHub

About this Skill

Perfect for Forensic Analysis Agents needing standardized and reproducible workflows with LLMs thor-skills is a root skill that routes requests to sub-skills, enforcing global rules for reproducibility and safety in LLM workflows.

Features

Enforces global rules for LLMs
Routes requests to the right sub-skill
Prefer explicit paths and output directories
Keeps changes safe by avoiding deletion of evidence
Supports forensic and lab workflows by default

# Core Topics

LLM workflow management reproducible commands explicit paths forensic analysis lab workflows THOR flags
NextronSystems NextronSystems
[0]
[0]
Updated: 3/23/2026

Killer-Skills Review

Decision support comes first. Repository text comes second.

Reference-Only Page Review Score: 8/11

This page remains useful for operators, but Killer-Skills treats it as reference material instead of a primary organic landing page.

Original recommendation layer Concrete use-case guidance Explicit limitations and caution Locale and body language aligned
Review Score
8/11
Quality Score
35
Canonical Locale
en
Detected Body Locale
en

Perfect for Forensic Analysis Agents needing standardized and reproducible workflows with LLMs thor-skills is a root skill that routes requests to sub-skills, enforcing global rules for reproducibility and safety in LLM workflows.

Core Value

Enforces global rules for safe and reproducible commands, providing explicit paths and output directories while keeping changes safe, and defaults to forensic and lab workflows, all while preventing the invention of THOR flags or behavior

Ideal Agent Persona

Perfect for Forensic Analysis Agents needing standardized and reproducible workflows with LLMs

↓ Capabilities Granted for thor-skills

Routing requests to the right sub-skill for efficient workflow management
Enforcing global rules for reproducible commands in forensic analysis
Safeguarding against unintended system modifications or evidence deletion

! Prerequisites & Limits

  • Requires adherence to global rules
  • Default focus is forensic and lab workflows
  • May require explicit user input for certain actions

Why this page is reference-only

  • - The underlying skill quality score is below the review floor.

Source Boundary

The section below is imported from the upstream repository and should be treated as secondary evidence. Use the Killer-Skills review above as the primary layer for fit, risk, and installation decisions.

After The Review

Decide The Next Action Before You Keep Reading Repository Material

Killer-Skills should not stop at opening repository instructions. It should help you decide whether to install this skill, when to cross-check against trusted collections, and when to move into workflow rollout.

Install Path

Start With Installation And Validation

If this skill is worth continuing with, the next step is to confirm the install command, CLI write path, and environment validation.
Trusted Recheck

Cross-Check Against Trusted Picks

If you are still comparing multiple skills or vendors, go back to the trusted collection before amplifying repository noise.
Workflow

Move To Workflow Collections For Team Rollout

When the goal shifts from a single skill to team handoff, approvals, and repeatable execution, move into workflow collections.
Labs Demo

Browser Sandbox Environment

⚡️ Ready to unleash?

Experience this Agent in a zero-setup browser environment powered by WebContainers. No installation required.

Boot Container Sandbox

FAQ & Installation Steps

These questions and steps mirror the structured data on this page for better search understanding.

? Frequently Asked Questions

What is thor-skills?

Perfect for Forensic Analysis Agents needing standardized and reproducible workflows with LLMs thor-skills is a root skill that routes requests to sub-skills, enforcing global rules for reproducibility and safety in LLM workflows.

How do I install thor-skills?

Run the command: npx killer-skills add NextronSystems/thor-skill/thor-skills. It works with Cursor, Windsurf, VS Code, Claude Code, and 19+ other IDEs.

What are the use cases for thor-skills?

Key use cases include: Routing requests to the right sub-skill for efficient workflow management, Enforcing global rules for reproducible commands in forensic analysis, Safeguarding against unintended system modifications or evidence deletion.

Which IDEs are compatible with thor-skills?

This skill is compatible with Cursor, Windsurf, VS Code, Trae, Claude Code, OpenClaw, Aider, Codex, OpenCode, Goose, Cline, Roo Code, Kiro, Augment Code, Continue, GitHub Copilot, Sourcegraph Cody, and Amazon Q Developer. Use the Killer-Skills CLI for universal one-command installation.

Are there any limitations for thor-skills?

Requires adherence to global rules. Default focus is forensic and lab workflows. May require explicit user input for certain actions.

↓ How To Install

  1. 1. Open your terminal

    Open the terminal or command line in your project directory.

  2. 2. Run the install command

    Run: npx killer-skills add NextronSystems/thor-skill/thor-skills. The CLI will automatically detect your IDE or AI agent and configure the skill.

  3. 3. Start using the skill

    The skill is now active. Your AI agent can use thor-skills immediately in the current project.

! Reference-Only Mode

This page remains useful for installation and reference, but Killer-Skills no longer treats it as a primary indexable landing page. Read the review above before relying on the upstream repository instructions.

Upstream Repository Material

The section below is imported from the upstream repository and should be treated as secondary evidence. Use the Killer-Skills review above as the primary layer for fit, risk, and installation decisions.

Upstream Source

thor-skills

Install thor-skills, an AI agent skill for AI agent workflows and automation. Review the use cases, limitations, and setup path before rollout.

SKILL.md
Readonly
Upstream Repository Material
The section below is imported from the upstream repository and should be treated as secondary evidence. Use the Killer-Skills review above as the primary layer for fit, risk, and installation decisions.
Supporting Evidence

THOR Skills

This is the root skill. It routes requests to the right sub-skill and enforces a few global rules.

Global rules

  • Don't invent THOR flags or behavior. If something is unclear, ask for the missing detail instead of guessing.
  • Prefer reproducible commands: explicit paths, explicit output directory, explicit mode.
  • Keep changes safe: don't recommend deleting evidence or modifying the target system unless the user explicitly asks.
  • Default focus is forensic / lab workflows. If it's live endpoint scanning, call that out and keep it conservative.
  • THOR versions: v10 is stable; v11 is TechPreview. Some features are v11-only. In particular, THOR Lens relies on the audit trail output, which requires THOR v11 and is not available in THOR v10.
  • THOR Lite vs full THOR: Lite is a free scanner with reduced features (~5 modules, ~4k open source signatures, no Sigma, no lab mode, no audit trail). Identify which version the user has before troubleshooting missing features.

Routing rules

  • If the user wants to run a scan or asks "what command should I run" - use thor-scan (also covers THOR Lite scanning with appropriate flag adjustments).
  • If the user pasted results or asks "what does this finding mean" - use thor-log-analysis.
  • If the user reports hangs, slowness, crashes, missing output, license/update weirdness - use thor-troubleshooting.
  • If the user asks about update/upgrade/report generation/yara-forge/offline packs - use thor-maintenance.
  • If the user asks about THOR Lens, forensic timeline viewing, importing audit trails, or MCP integration for timeline analysis - use thor-lens (note: requires full THOR v11, not compatible with THOR Lite).
  • If the user asks about thor10.db/thor11.db, scan timing, performance tuning, slow rules, or resume state - use thor-db.
  • If the user asks why a feature is missing, expects full THOR behavior from Lite, or asks about Lite limitations - use thor-lite.
  • If the user wants to write a plugin, extend THOR functionality, parse custom formats, or asks about the plugin API - use thor-plugins (requires THOR v11+).
  • If the user wants to create custom IOCs, YARA rules, Sigma rules, STIX indicators, or asks about the custom-signatures folder - use custom-signatures.

Minimum inputs to collect (only what's needed)

  • OS (Windows/Linux/macOS)
  • THOR version (v10 or v11) and install path
  • License situation if relevant (lab vs standard vs unknown)
  • Target type: live path vs mounted image vs memory dump vs log-only analysis
  • Where outputs/logs should go

Available Skills

  • thor-scan/ - Run THOR scans and produce the exact command line for the target scenario
  • thor-log-analysis/ - Triage and interpret THOR logs and findings
  • thor-troubleshooting/ - Diagnose stuck/slow/failed THOR runs and recommend next actions
  • thor-maintenance/ - Update/upgrade THOR, manage signature packs, generate reports
  • thor-lens/ - THOR Lens forensic timeline viewer; import audit trails, web UI, MCP integration (requires THOR v11)
  • thor-db/ - Analyze ThorDB (thor10.db/thor11.db) for performance tuning and diagnostics
  • thor-lite/ - THOR Lite limitations, workarounds, and guidance for the free scanner
  • thor-plugins/ - Write custom THOR plugins to extend scanner functionality (requires THOR v11+)
  • custom-signatures/ - Create custom IOCs, YARA rules, Sigma rules, and STIX indicators

Related Skills

Looking for an alternative to thor-skills or another community skill for your workflow? Explore these related open-source skills.

View All

openclaw-release-maintainer

Logo of openclaw
openclaw

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

★ 333.8k
⑂ 0
AI

widget-generator

Logo of f
f

Generate customizable widget plugins for the prompts.chat feed system

★ 149.6k
⑂ 0
AI

flags

Logo of vercel
vercel

The React Framework

★ 138.4k
⑂ 0
Browser

pr-review

Logo of pytorch
pytorch

Tensors and Dynamic neural networks in Python with strong GPU acceleration

★ 98.6k
⑂ 0
Developer