nextronsystems/thor-troubleshooting
thor-troubleshooting/SKILL.md
Troubleshoot THOR runs that are stuck, slow, failing to start, stopping early, or produce missing output. Use when the user reports freezes, long runtimes, high CPU pauses, scan aborts, or licensing/update issues.
$ install --global
skillsauthnpx skillsauth add nextronsystems/thor-skill thor-troubleshootingInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 8, 2026, 2:35 AM10.8s8 files scanned
SKILL.md
- name:
- thor-troubleshooting
- description:
- Troubleshoot THOR runs that are stuck, slow, failing to start, stopping early, or produce missing output. Use when the user reports freezes, long runtimes, high CPU pauses, scan aborts, or licensing/update issues.
THOR Troubleshooting Skill
Goal: diagnose the failure mode fast and propose minimal next actions.
Rules
- Assume AV/EDR interference until disproven (especially "frozen at 98%" style reports).
- For scan aborts: check last ~50 log lines first. Clear message = THOR's decision (Rescontrol/timeout). No message = external kill.
- Ask for exactly the minimum needed: platform + THOR version + command used + what "stuck" means (no progress? no output? stopped early?).
- Use Ctrl+C interrupt menu guidance when relevant.
- Prefer thor-util diagnostics when available.
Use these references when needed
- Stuck scans: reference/stuck-scans.md
- Scan aborts (Rescontrol, timeouts, AV/EDR kills): reference/scan-aborts.md
- AV/EDR interference patterns: reference/av-edr-interference.md
- Diagnostics: reference/diagnostics.md
- Performance and memory issues: reference/performance-and-resources.md
- Common pitfalls (fast empty scans, wrong paths): reference/common-pitfalls.md
Optional helper script
- scripts/quick-env-check.sh: quick info dump about folder permissions, free space, CPU/RAM, and THOR files present.
Output format
- Likely cause ranking (top 3)
- Next command(s) to run
- What evidence to collect (files/log snippets) if it persists
Related Skills
nextronsystems/thor-scan
content-media
VerifiedTrustedCommunity
Run THOR scans and propose the exact command line for Windows, Linux, or macOS. Use when the user wants to scan a host, a directory, a mounted image, or a memory dump with THOR v10/v11.
9SKILL.mdUpdated Apr 8, 2026
nextronsystems/thor-plugins
tools
VerifiedTrustedCommunity
Write, package, and use THOR plugins to extend scanner functionality. THOR v11+ only.
9SKILL.mdUpdated Apr 8, 2026
nextronsystems/thor-maintenance
development
VerifiedTrustedCommunity
--- name: thor-maintenance description: Maintain THOR installs using thor-util: update signatures, upgrade versions, download offline packs, generate reports, manage YARA-Forge. Use when the user asks about updating/upgrading/report generation. --- # THOR Maintenance Skill Rules - Be precise about thor-util verbs: - update = signatures - upgrade = program + signatures, keep config - download = full pack incl config (offline use case) - Prefer stable signatures; mention sigdev only for urg
9SKILL.mdUpdated Apr 8, 2026
nextronsystems/thor-log-analysis
data-ai
VerifiedTrustedCommunity
Interpret THOR scan results and explain what findings mean. Use when the user pastes THOR log lines, shares a log file, or asks how to triage Notices/Warnings/Alerts.
9SKILL.mdUpdated Apr 8, 2026