Agent Skills

---

name: pentest-output-standards

description: 输出规范:中文分析,思维链,漏洞报告模板,负结果,黑板状态总览,改动台账,死锁突破。 Use when reporting findings, maintaining change ledger, or formatting pentest output.

---

name: pentest-verification

description: 验证铁律:搜索≠漏洞,confirmed Fact须证据,tentative表线索,禁止空泛推测,负结果也落库, 想象力拉满+单步验证零容忍。Use when writing project facts, validating findings, or avoiding hallucination.

---

name: post-exploitation

description: 后渗透/提权+凭据破解+密码学:反弹shell,Linux/Windows提权,横向,隧道,免杀,C2持久化,hashcat/Padding Oracle/hash长度扩展。Use when post-exploitation, privilege escalation, lateral movement, or cracking crypto.

---

name: proxy-tool-bootstrap

description: 自找代理+工具自举:SOCKS5/HTTP/Tor换路序列,工具Python自举,字典自生成,OOB基础设施。Use when blocked by 403/429/WAF/timeout, missing tools, or needing OOB confirmation.

---

name: redteam-opsec

description: OPSEC隐蔽作战纪律:IP黑名单绕过,速率时序,流量混淆,最小足迹,反取证,渐进暴露。Use when maintaining stealth, bypassing IP bans, or planning covert red-team ops.

---

name: source-code-hunting

description: 源码狩猎:.git泄露,危险函数grep,JS RC4解混淆,semgrep/CodeQL,trufflehog,patch diff,供应链/CI。Use when hunting source leaks, secrets, JS deobfuscation, or supply-chain issues.

---

name: specialized-attack-playbooks

description: 专题实战利用:GoEdge私钥导出,灰产CDN取证,ARP MITM,CDN→S3 STS链,宝塔+UniApp,AI IDE API反代,OCS+MinIO;含references/scripts支持文件索引。Use when applying specialized playbooks for GoEdge, CDN, ARP MITM, BT Panel, OCS, MinIO.

---

name: unlimited-attack-scope

description: 不设限原则:搜索/验证/串联/记录一切,全领域适用,被拦换路,不达不休。Use when reminding scope is unlimited across Web/APK/cloud/AI/wireless/social eng.

---

name: web-attack-methods

description: Web全栈攻击:SQLi/命令注入/SSTI/XSS/SSRF/NoSQL,认证JWT/OAuth/SAML,LFI/上传,Tomcat/WS/STOMP/XFF/PATH_INFO/CDN502/网宿JS挑战绕过。Use when testing Web injection, auth bypass, server-side, WAF/CDN bypass.

---

name: wireless-hardware-attack

description: 无线/硬件:WiFi PMKID/WPS/Evil Twin,BLE,Zigbee,NFC,SDR,UART/JTAG/SPI,侧信道,故障注入。Use when attacking WiFi, BLE, RFID, SDR, or hardware interfaces.

---

name: zero-day-discovery

description: 0day自主发现引擎:变体分析/补丁间隙/差分/Fuzzing/污点推理/N-day武器化/猎人思维。Use when public vulns not found and need to discover 0day or weaponize N-day.

---

name: adaptive-stem-alignment

description: Incremental audio production with duration mismatch handling, adaptive stem extension, and pre-mix alignment verification

---

name: aligned-stem-workflow

description: Incremental audio production with duration alignment handling, per-stem verification, and adaptive extension strategies

---

name: audio-track-production

description: End-to-end audio production workflow with stems, effects, archiving, and verification

---

name: cascade-fail-recovery

description: Handle cascading data retrieval tool failures by falling back to embedded knowledge generation

---

name: code-exec-fallback

description: Fallback pattern for executing Python code when execute_code_sandbox fails

---

name: code-exec-fallback-266cba

description: Fallback workflow for reliable code execution when sandbox fails repeatedly

---

name: code-execution-fallback

description: Handle code execution failures with fallback strategies and anchored workspace paths

---

name: code-execution-fallback-e81068

description: Fallback workflow for executing Python code when execute_code_sandbox fails repeatedly

---

name: comprehensive-soap-note

description: Generate complete medical SOAP notes with all four sections in a single comprehensive file write operation

---

name: create-soap-note

description: Generate structured medical SOAP notes with all required sections in a single comprehensive file write.

---

name: debug-sandbox-execution

description: Debug Python code execution failures by capturing partial traces, isolating failing functions, and incrementally verifying outputs

---

name: delegated-file-edit-verification

description: Verify delegated file-edit results directly in the target workspace before accepting success, and rerun with absolute paths if the delegate's report conflicts with reality.

---

name: delegate-task

description: Delegate tasks to OpenSpace — a full-stack autonomous worker for coding, DevOps, web research, and desktop automation, backed by an extensive MCP tool and skill library. Skills auto-improve through use, reducing token consumption over time. A cloud community lets agents share and collectively evolve reusable skills.