game-find-anticheat
Use when asked to identify, map, locate, or analyze anti-cheat components in a game process or binary. Applies both to static pre-launch analysis and runtime behavioral identification.
- License 许可
- MIT
- 最近更新
- 2026-11-02
- Stars
- ★ 0
- Forks
- 0
01 前言 Front Matter
- name
- game-find-anticheat
- description
- Use when asked to identify, map, locate, or analyze anti-cheat components in a game process or binary. Applies both to static pre-launch analysis and runtime behavioral identification.
03 SKILL.md 正文
Anti-Cheat Identification
Overview
Systematic identification of which anti-cheat system is present, what it monitors, and where its key logic lives. Work static-first, then live.
Known AC Signatures
| Anti-Cheat | Strings / Names | Kernel Driver | Key Imports |
|---|---|---|---|
| EasyAntiCheat | EasyAntiCheat, EAC, eac_launcher |
EasyAntiCheat.sys, EasyAntiCheat_EOS.sys |
NtQueryInformationProcess, ObRegisterCallbacks |
| BattlEye | BattlEye, BEService, BEClient |
BEDaisy.sys |
MmGetSystemRoutineAddress |
| Vanguard | vanguard, vgc, vgk |
vgk.sys |
kernel IOCTL-heavy |
| FACEIT | faceit, FACEITClient |
faceit.sys |
NtSetInformationProcess |
| PunkBuster | PunkBuster, PnkBstr |
none (user-mode only) | socket, WSA* |
| VAC (Steam) | VAC, SteamService |
none | loaded via Steam |
| Ricochet (CoD) | ricochet, RICOCHET |
Activision kernel driver | |
| nProtect | GameGuard, nProtect |
npggsvc.sys |
Pipeline
Phase 1 — Static Identification
# Binary Ninja
list_strings_filter(pattern="EasyAntiCheat|BattlEye|vanguard|faceit|PunkBuster|ricochet|GameGuard")
list_imports() # look for: NtQuerySystemInformation, ObRegisterCallbacks,
# MmGetSystemRoutineAddress, PsSetCreateProcessNotifyRoutine
search_functions_by_name("anti")
search_functions_by_name("detect")
search_functions_by_name("cheat")
Phase 2 — Live Process Identification
// Frida: execute_in_session — find AC modules loaded in game
### Phase 3 — Kernel Driver Detection
### Cheat Engine MCP
### Look for .sys files matching the AC driver table above
### Phase 4 — Map AC Logic
### Binary Ninja — select the AC DLL
### Phase 5 — Behavioral Monitoring
### Common Mistakes
04 同仓库更多 Skills
clarify-requirements
Resolve genuine pre-execution ambiguity by scanning repo context, generating 1-6 grounded options, and asking 1-3 focused questions via AskUserQuestion. NOT for mid-task use (injection risk); NOT when the goal is already unambiguous; use to disambiguate vague prompts before any file edits.
openmm-md
Run FREE, open-source, Windows-native GPU molecular dynamics via the openmm-md MCP (OpenMM + CUDA on the local NVIDIA GPU). Use for protein / protein-ligand MD when you want a free stack or are on Windows without a Schrodinger license. Covers the full workflow (prepare, solvate, minimize, equilibrate, production, analyze, mmgbsa) AND an honest decision guide vs Schrodinger Desmond, including how to run Desmond legitimately on Linux or a cloud GPU with a real license. This is a deliberately LESSER free alternative and does NOT replace the schrodinger MCP tools. Do NOT use it to pick a free tool when a validated FEP+, WaterMap, IFD-MD, or Prime MM-GBSA result is actually required.
visual-review
Take screenshots of web pages and UI using Playwright for visual review and iteration
status
Diagnostic status report — shows metaswarm installation state, project setup, and potential issues
start
Use when starting work on any task, when the user mentions metaswarm, or when the user wants to begin tracked development work
setup
Interactive project setup — detects your project, configures metaswarm, writes project-local files