Is the eBPF Skill skill free?

Yes. The skill itself is free from h0x0er/ebpf-skill. SkillProof publishes the install command and an independent test verdict at no cost.

What is the eBPF Skill SkillProof Score?

8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 5/5.

How do I install eBPF Skill?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use eBPF Skill with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

eBPF Skill

Decision tables for eBPF: hooks, maps, kernel minimums, verifier fixes

by h0x0er · h0x0er/ebpf-skill

Tested · Works

Install — copy the command Download source ↗

Test report

Verdict: Tested · Works
Score: 8.8/10
Tested: Jul 17, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Jul 30, 2026 · 85bd0e8

⚠ This skill is no longer available upstream. Our re-check on Aug 10, 2026 couldn't find it any more (repo unreachable/deleted). The test below is what we measured on Jul 17, 2026 and we're leaving it up as a record — but there is nothing left to install, so we've removed the command.

Asked both runs the same question: stream execve events to a Go agent on kernel 5.4. The no-skill answer picked the right ring-buffer fallback but attached to a kprobe symbol (sys_execve) that is not attachable on 5.4 x86_64; the skill's chooser tables fixed that via BPF_KSYSCALL and added the CAP_SYS_ADMIN-below-5.8 requirement, the fentry-to-kprobe fallback, and exact ebpf-go entry points the baseline omitted. Its kernel-minimum table checks out against kernel history, with one possible off-by-one (USER_RINGBUF listed as 6.2; it landed in 6.1). No Linux or BPF toolchain exists on this test Mac, so compile and load were not executed — the delta shown is answer-correctness, not runtime.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 7/10
Docs & honesty 5/5

What eBPF Skill does

Expert routing layer for eBPF work: decision tables for toolchain (libbpf, ebpf-go, bpftrace), program types, map types, and kernel version minimums with explicit fallback rules, plus workflow guides for development, debugging, CI testing, and verifier triage. Triggers on eBPF, XDP, kprobe, BPF map, and verifier questions, loading only the reference file the task needs.

How to install eBPF Skill

Nothing to install: the source repository no longer has this skill. If the author brings it back, our daily re-check will pick it up and the command will reappear here.

Commands — how to trigger eBPF Skill

/ebpf-skill Decision tables for eBPF: hooks, maps, kernel minimums, verifier fixes

It also activates on plain-language prompts like these:

Stream execve events to userspace on a kernel 5.4 host
What hook should I use to trace syscalls on an older kernel?
My eBPF verifier is rejecting this program, help me fix it

Frequently asked questions

Is the eBPF Skill skill free?: Yes. The skill itself is free from h0x0er/ebpf-skill. SkillProof publishes the install command and an independent test verdict at no cost.
Does eBPF Skill work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 17, 2026. Verdict: Tested · Works. Asked both runs the same question: stream execve events to a Go agent on kernel 5.4. The no-skill answer picked the right ring-buffer fallback but attached to a kprobe symbol (sys_execve) that is not attachable on 5.4 x86_64; the skill's chooser tables fixed that via BPF_KSYSCALL and added the CAP_SYS_ADMIN-below-5.8 requirement, the fentry-to-kprobe fallback, and exact ebpf-go entry points the baseline omitted. Its kernel-minimum table checks out against kernel history, with one possible off-by-one (USER_RINGBUF listed as 6.2; it landed in 6.1). No Linux or BPF toolchain exists on this test Mac, so compile and load were not executed — the delta shown is answer-correctness, not runtime.
What is the eBPF Skill SkillProof Score?: 8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 5/5.
How do I install eBPF Skill?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use eBPF Skill with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.