Agent Skills

---

name: deep-invade

description: Deep pentest WP: SSRF, plugin CVE, JS mine, port scan chain.

---

name: docker-privesc

description: Escape Docker containers to host root via 5 techniques.

---

name: email-security

description: DMARC/SPF/DKIM check, email spoofing, SMTP test, and security header analysis

---

name: error-log-mining

description: Mine error_log for creds, paths, SQL when leak hunt finds.

---

name: exchange-owa-attack

description: Exchange/OWA NTLM AD leak, spray attack when mail subdomain.

---

name: firebase-supabase-attack

description: Exploit Firebase/Supabase for data via JS config leak probe.

---

name: flask-werkzeug-attack

description: Exploit Flask/Werkzeug debugger exposure for traceback and SECRET leaks.

---

name: github-secret-hunting

description: Find leaked API keys, tokens, and credentials in public GitHub repositories.

---

name: gitlab-public-recon

description: Mine GitLab for secrets, CI tokens when subdomain found.

---

name: google-dorks-catalog

description: High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated

---

name: hardcoded-credential-hunt

description: Detect hardcoded passwords in HTML forms, JavaScript, and API responses.

---

name: http2-header-impersonation

description: Spoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile.

---

name: humanize-automation

description: Human-like mouse, keyboard and scroll behavior for behavioral bot bypass.

---

name: iot-camera-recon

description: Attack cameras via RTSP, ONVIF, Axis config when 554 open.

---

name: js-secrets-extraction

description: Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints

---

name: jwt-attack

description: Decode, forge, brute JWTs when Bearer auth header is seen.

---

name: pentest-playbook

description: 7-phase pentest pipeline from passive recon to exploitation.

---

name: recon-playbook

description: Use when starting or restructuring an authorized external web and API assessment.

---

name: saml-sso-attack

description: Attack SAML SSO via XSW, signature strip, metadata extract.

---

name: sector-recon-methodology

description: Pick sectors, compile targets, batch recon for campaigns.

---

name: wordpress-full-compromise

description: Use when verified WordPress findings may combine into an authorized path to administrative or server control.

---

name: punk-avatar

description: Generate avatar images, surreal paper-art portraits, and reusable image prompts from the shared Punk style library for people, pets, objects, profile pictures, pet portraits, and keepsake cards. Use this skill to identify the subject from image or text, choose one avatar-capable style and any required style mode, compile the selected style atom into the avatar blueprint, save the final prompt, and generate the image when an image-generation tool is available.

---

name: punk-cover

description: Generate localized cover images and reusable image prompts from the shared Punk style library for articles, Xiaohongshu notes, WeChat public account posts, X posts, Instagram, Facebook, LinkedIn, YouTube, TikTok, Pinterest, Snapchat, Reddit, Threads, Bluesky, Medium, topic drafts, and requests for covers, social cover images, poster prompts, style-template-based image prompts, or image generation from long-form text. Use this skill to analyze source content, resolve unsupported ratios to the closest available generation ratio, select a localized visual style, save the final prompt, and generate the image when an image-generation tool is available.

---

name: punk-ip-video-cover

description: 从上传人物照片提取四个颜色并搭配，抠出真人，按主题与标题自由构图，制作小红书人物 IP 视频封面；从独立库选择字体、材质与装饰风格，允许动作表情修改，支持 3:4、16:9、4:3、9:16 和多个版本。也用于接入新风格和编写封面提示词。