feat(skills): add CyberChef MCP tooling skill and documentation - #1368

Confidence Score: 5/5

[Low risk] Adds CyberChef tooling documentation and configuration example.

The PR appears safe to merge, with a non-blocking correction needed to the binary entropy guidance.

Findings

1.  Raw-byte entropy workflow is missing ▶

### Issue 1
strix/skills/tooling/cyberchef.md:106
The playbook recommends decoding Hex or Base64 before measuring entropy, but `call_mcp` passes JSON values and does not provide a way to pass arbitrary decoded bytes to the next tool. For encrypted or compressed payloads containing such bytes, an agent cannot reliably apply the stated bits-per-byte thresholds and may misclassify the payload.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

Summary

The PR adds a CyberChef MCP tooling playbook and a sample server configuration. Since the prior review, it updates the package reference, routes examples through Strix’s generic MCP tools, and qualifies entropy guidance by encoding.

• The dispatch and configuration-description issues from the prior review are addressed.
• The decoded-byte entropy recommendation still needs a workable representation for binary payloads.

_{Reviews (2) · Last reviewed commit: "docs(cyberchef): correct operation count..."}

Thank you for the thorough and high-signal review! All 3 findings have been addressed in commit b851572:

1. P1 — MCP Dispatch Interface: Updated the playbook to detail Strix's generic MCP dispatch architecture (list_mcps, search_mcp_tools, get_mcp_tool_schema, and call_mcp). Replaced all direct tool invocations with call_mcp(connection="cyberchef", tool="...", arguments={...}).
2. P2 — Representation-Calibrated Shannon Entropy: Added explicit qualifications explaining that Shannon entropy is bounded by alphabet size ($\log_2(N)$). Documented calibrated thresholds for Hex ($\le 4.0$ bits/char) and Base64 ($\le 6.0$ bits/char), and advised decoding to raw byte streams before assessing binary entropy.
3. P2 — Documentation Mismatch: Updated the introductory sentence in docs/integrations/mcp.mdx to accurately describe the local stdio servers (CyberChef and local filesystem) alongside the remote HTTP GitHub server.

Ready for re-review!

Hi team! I have addressed all review feedback:

Updated all examples and playbooks to use Strix's generic call_mcp dispatch workflow with the cyberchef connection.
Calibrated the Shannon entropy guidance by input representation (Hex max 4.0 bits/char, Base64 max 6.0 bits/char, raw bytes max 8.0 bits/byte) to prevent misclassifying hex ciphertext.
Adjusted the transport wording in docs/integrations/mcp.mdx to reflect local stdio servers.
Updated the description to accurately reflect CyberChef MCP's 28 core zero-dependency deterministic operations.
Ready for your re-review!