---
name: al-115-draft-a-malware-reverse-engineering-brief
description: "Have an agent produce a structured first-pass reverse-engineering brief on a malware sample so researchers can compare more threats faster, like SentinelOne using OpenAI Daybreak to cut deep malware analysis from weeks to roughly eight hours while keeping humans accountable for decisions. Use when the user wants help with malware analysis (security) for a small business."
---

# Draft a malware reverse-engineering brief

Have an agent produce a structured first-pass reverse-engineering brief on a malware sample so researchers can compare more threats faster, like SentinelOne using OpenAI Daybreak to cut deep malware analysis from weeks to roughly eight hours while keeping humans accountable for decisions.

## Inputs to collect first
Ask the user for anything below that they haven't already given you. Don't guess missing facts.

- Lab constraints
- Your own material (text, notes or data)

## Instructions

Do the task below with the user's inputs in place of each [bracket].

Produce a first-pass malware reverse-engineering brief for human researchers. Sample / hash / sandbox report: [paste or attach]. Environment notes: [lab constraints]. Cover: (1) high-level behavior summary, (2) persistence and execution mechanisms, (3) network indicators and C2 patterns if present, (4) notable code or packing tricks, (5) similarities to known families if evidence supports it, (6) open questions and recommended next analyst steps, (7) IOCs in a clean table. Label confidence on every claim and never invent hashes or C2 hosts. Don't detonate samples outside the approved lab, don't block or hunt in production, and leave containment decisions to me.

## Safety checks (share these with the user)

- Check names, dates, numbers and any claim against your own source material before you use the answer. AI can misread or invent details.
- Say clearly which parts need a person to review or approve before anything is sent, paid, posted or filed.

## About this skill

- Works with: OpenAI Daybreak, ChatGPT, Claude, Codex, sandbox / RE tools
- Based on this real-world example: https://openai.com/index/sentinelone/
- Free prompt from AgentPlaybook Real Estate: https://agentic-library.netlify.app/prompt/al-115-draft-a-malware-reverse-engineering-brief/
- To install in an agent that supports Agent Skills, save this file as SKILL.md in a folder with the same name as `name` above (for example in your skills directory). Install steps for Claude.ai, Claude Code, Cursor and Codex: https://agentic-library.netlify.app/skills/