opplan-converter
Convert engagement documents into machine-readable OPPLAN for the ralph loop — objective decomposition, acceptance criteria, MITRE mapping, priority ordering.
4.72k repo starsObserved in 1 repos
Documents
Find the skill for your next task.
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
osint-overview
Use when the engagement requires passive reconnaissance only — no packets to the target's authoritative infrastructure. Splits off from the Recon agent so bug-bounty and pre-engagement work can run with outbound-only network policy. Maltego, Shodan, Censys, Hunter.io, breach-data lookups, GitHub code search, Wayback Machine archives, certificate transparency, BGP/ASN mapping.
4.72k repo starsObserved in 1 repos
Research
path-traversal
Hunt directory traversal and archive traversal (ZipSlip/TarSlip) from user input to filesystem operations.
4.72k repo starsObserved in 1 repos
DevOps & Security
reverser-malware-triage
Fast malware triage workflow — static (PE/Mach-O/ELF format, strings, imports, signatures, entropy/packed indicators), dynamic (sandbox with INetSim, Wireshark, Process Monitor, Procmon, time-shift), unpack (Scylla/PE-sieve), then full RE with Ghidra/IDA. Designed for ≤15 min initial verdict.
4.72k repo starsObserved in 1 repos
DevOps & Security
structured-questions
How to use ask_user_question — the single operator-input channel for every interview question, including free-form fields via allow_other=true.
4.72k repo starsObserved in 1 repos
Agent Building
supply-chain-overview
Use when the engagement scope includes supply-chain attack simulation — typosquatted package publication, dependency confusion, GitHub Actions secret mining, internal mirror poisoning, OAuth-app impersonation, or vendor portal credential abuse.
4.72k repo starsObserved in 1 repos
DevOps & Security
terraform-state-leak
Exploit exposed Terraform state files — secrets, cloud creds, RDS passwords, IAM keys, and infrastructure topology in plain JSON.
4.72k repo starsObserved in 1 repos
DevOps & Security
verifier-overview
Stage 3 triage and verification playbook. Crafts minimal PoCs, runs them with ZFP controls, promotes validated bugs to FINDING nodes with CVSS. Load at verifier-agent startup.
4.72k repo starsObserved in 1 repos
Testing & Quality
web-api-enumeration
REST API discovery, GraphQL detection, parameter fuzzing.
4.72k repo starsObserved in 1 repos
DevOps & Security
wireless-security
Wireless network security reconnaissance — WiFi analysis, Bluetooth assessment, RFID/NFC evaluation, signal capture, protocol analysis, encryption testing, rogue device detection.
4.72k repo starsObserved in 1 repos
DevOps & Security