verdict-dfir-beta
BETA — Community & contribution hub for VERDICT, a DFIR agent that runs inside Claude Code. New UI design and images landing soon; see verdict-dfir for the stable release.
Install / Use
claude mcp add TimothyVang -- npx -y github:TimothyVang/verdict-dfir-betaIf the server publishes to npm under a different name, use that package instead — check the repo README.
MCP Server
Model Context Protocol server
Quality Score
Category
AutomationSupported Platforms
Our assessment of verdict-dfir-beta
verdict-dfir-beta scores 40/100 on our quality scale, 2834th of 2,892 Automation skills we index.
Its MCP Server is 1.5 KB long, written without headings and no code examples: moderately detailed.
It has no GitHub stars yet, so there is no community track record; judge it on its content.
Maintenance, license and trust
- We could not determine when the repository was last updated.
- Our last check on 2026-10-18 found the source still online.
- No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
- Its trust signals score 68/100, with 3 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
verdict-dfir-beta compared with similar skills
All 4 of these similar skills score higher than verdict-dfir-beta; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| verdict-dfir-beta (this skill)by TimothyVang | 40 | 0 | — | MCP Server |
| taste-skillby Leonxlnx | 100 | 101.6k | 3d ago | CLAUDE.md |
| Agent-Reachby Panniantong | 100 | 101.3k | today | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 77.6k | 1d ago | CLAUDE.md |
| CowAgentby zhayujie | 100 | 47.5k | today | CLAUDE.md |
Frequently asked questions
- How do I install verdict-dfir-beta?
- Run
claude mcp add TimothyVang -- npx -y github:TimothyVang/verdict-dfir-beta. The install tabs above show the steps for each supported agent. - Which AI agents does verdict-dfir-beta work with?
- It is written for Claude Code and Claude Desktop, as a MCP Server file. Other agents that read the same format can often use it too.
- Is verdict-dfir-beta safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It declares no license and scores 68/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is verdict-dfir-beta still maintained?
- We could not determine when the repository was last updated.
Skill content
View source on GitHub{ "$schema": "https://raw.githubusercontent.com/modelcontextprotocol/specification/main/schema/draft/schema.json", "_comment": "SSH-transport variant. Activate with scripts/find-evil-sift, which rewrites IP/key/repo at runtime from env vars (SIFT_SSH_KEY, SIFT_VM_IP, GUEST_USER, GUEST_REPO_PATH). Default key: ~/.ssh/sift_key. Do not hand-edit the IP or key path here; they are populated automatically.", "mcpServers": { "findevil-mcp": { "type": "stdio", "command": "ssh", "args": [ "-i", "~/.ssh/sift_key", "-T", "-o", "StrictHostKeyChecking=accept-new", "-o", "ServerAliveInterval=30", "-o", "ServerAliveCountMax=3", "sansforensics@192.0.2.10", "VOLATILITY_BIN=/home/sansforensics/.local/bin/vol HAYABUSA_BIN=/home/sansforensics/.local/bin/hayabusa VELOCIRAPTOR_BIN=/home/sansforensics/.local/bin/velociraptor exec /home/sansforensics/find-evil/target/release/findevil-mcp" ] }, "findevil-agent-mcp": { "type": "stdio", "command": "ssh", "args": [ "-i", "~/.ssh/sift_key", "-T", "-o", "StrictHostKeyChecking=accept-new", "-o", "ServerAliveInterval=30", "-o", "ServerAliveCountMax=3", "sansforensics@192.0.2.10", "cd /home/sansforensics/find-evil/services/agent_mcp && exec /home/sansforensics/.local/bin/uv run python -m findevil_agent_mcp.server" ] } } }
Related Skills
taste-skill
101.6kAgent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages
Agent-Reach
101.3kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
headroom
77.6kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
CowAgent
47.5kOpen-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent, multi-model, multi-channel. Lightweight, extensible, one-line install.
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.