القائمة
Shared interfaces and contracts between all agents. Every agent MUST read this skill before starting any implementation. This is the single source of truth for all cross-agent boundaries.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
Guides the implementation of the ReAct loop, orchestrator, memory, and planner. Use this when working on any file inside backend/agent/.
Guides FastAPI backend implementation. Use this when working on main.py, routers, or any API endpoint.
Guides implementation of security tools and exploit modules. Use this when working on shell_tools.py, exploit_tools.py, or any offensive security functionality.
Guides the implementation of any tool inside backend/tools/. Use this when creating, editing, or debugging a tool class.
Guides workspace and session management. Use this when working on session_manager.py, workspace_manager.py, or anything related to session isolation.
استنادا إلى تصنيف SOC المهني
| name | contracts |
| description | Shared interfaces and contracts between all agents. Every agent MUST read this skill before starting any implementation. This is the single source of truth for all cross-agent boundaries. |
Before writing any code, every agent must read and understand all contracts defined here. Never deviate from these interfaces without updating this file first.
Every tool must return this exact shape:
@dataclass
class ToolResult:
success: bool
output: str
artifact_path: str
findings: list[dict]
@dataclass
class Finding:
severity: Literal["critical", "high", "medium", "low"]
type: str # "sqli", "xss", "open_port", "cve", ...
target: str
detail: str
evidence: str # artifact path or raw snippet
timestamp: str
All agent steps streamed to frontend must follow this protocol exactly:
{ "type": "think", "content": "string" }
{ "type": "act", "tool": "string", "args": {} }
{ "type": "observe", "output": "string", "target": "terminal|editor" }
{ "type": "finding", "severity": "critical|high|medium|low", "detail": "string" }
{ "type": "done", "summary": "string" }
{ "type": "error", "message": "string" }
@dataclass
class Session:
session_id: str
target: str
status: Literal["idle", "running", "done", "error"]
created_at: str
workspace_path: str
Every session workspace MUST follow this exact structure:
workspaces/{session_id}/
├── .agent/
│ ├── plan.json
│ ├── findings.json
│ └── context.json
├── scans/
├── exploits/
├── loot/
├── artifacts/
└── reports/
POST /sessions → create session
GET /sessions/{id} → get session state
DELETE /sessions/{id} → terminate session
GET /sessions/{id}/workspace → get workspace tree
WS /sessions/{id}/stream → real-time agent stream
POST /sessions/{id}/message → send user message
Injected into LLM before every ReAct step:
{
"session_id": "string",
"target": "string",
"completed_tasks": ["string"],
"pending_tasks": ["string"],
"recent_findings": ["Finding"],
"open_artifacts": ["string"]
}
class BaseTool(ABC):
name: str
description: str
@abstractmethod
async def run(self, session_id: str, **kwargs) -> ToolResult:
pass
If any agent produces code that deviates from these contracts, that code must be rejected and rewritten to comply.