القائمة
Web security assessment. USE WHEN web assessment, pentest, security testing, vulnerability scan, threat modeling a web app.
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
استنادا إلى تصنيف SOC المهني
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/Sheshiyer/skill-clusters --skill webassessmentيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
عرض SKILL.md
Arcplume runs Grok through the Grok Build CLI's own OAuth-authenticated session (grok login) for image generation, with strict preflight validation, secret-safe handling, and headless CLI-driven execution -- no separate XAI_API_KEY billing. Video falls back to the billed xAI API. USE WHEN a user wants to generate an image via a locally logged-in Grok Build CLI session, e.g. 'generate an image with grok', 'use grok build', or 'use my logged-in grok session'.
Shared reference for the Selemene cluster: the two report surfaces (deterministic Rust reports vs. narrative witness-pipeline readings), the @selemene/bridge CLI contract, the output manifest format, and non-prescriptive witnessing tone. USE WHEN deciding which Selemene surface to invoke or when routing between birth/compatibility/transit reports and solo/dyadic readings.
Route Selemene Engine tasks to the right surface: deterministic reports (birth/compatibility/transit) via selemene-core and the @selemene/bridge CLI, or narrative witness readings via selemene-report. USE WHEN the user wants anything under the Selemene/Noesis umbrella but has not named the exact surface.
| name | webassessment |
| description | Web security assessment. USE WHEN web assessment, pentest, security testing, vulnerability scan, threat modeling a web app. |
| cluster | security |
| version | 1.0.0 |
| origin | PAI/Codex skills library |
Security assessment infrastructure integrating reconnaissance, threat modeling, and vulnerability testing.
| Trigger | Workflow |
|---|---|
| "understand application", "what does this app do", "map the application" | UnderstandApplication |
| "threat model", "attack scenarios", "how would I attack" | CreateThreatModel |
| "pentest", "security assessment", "test for vulnerabilities" | Pentest/MasterMethodology |
| "fuzz with ffuf", "directory fuzzing", "content discovery" | Ffuf/FfufGuide |
| "OSINT", "reconnaissance", "open source intelligence" | Osint/MasterGuide |
| "test web app", "Playwright", "browser automation" | Webapp/TestingGuide |
| "bug bounty", "bounty programs" | BugBounty/Programs |
| "vulnerability analysis with AI", "Gemini analysis" | VulnerabilityAnalysisGemini3 |
WebAssessment coordinates with specialized skills:
| Phase | Skill | Purpose |
|---|---|---|
| Scope Definition | Recon | Corporate structure, domain enumeration |
| Target Discovery | Recon | Subdomains, endpoints, ports |
| Understanding | WebAssessment | App narrative, user flows, sensitive data |
| Threat Modeling | WebAssessment | Attack scenarios, test prioritization |
| Injection Testing | PromptInjection | LLM-specific attacks |
| Intelligence | OSINT | People, companies, social media |
1. Corporate Structure (Recon) → Define scope and targets
2. Subdomain Enumeration (Recon) → Find all domains
3. Endpoint Discovery (Recon) → Extract JS endpoints
4. Understand Application → Build app narrative
5. Create Threat Model → Prioritize attack scenarios
6. Execute Testing → Test against identified threats
7. Report Findings → Document with PoCs
WebAssessment uses tools from the recon skill (run from the recon skill's Tools/ directory):
# Corporate structure for scope
bun Tools/CorporateStructure.ts target.com
# Subdomain enumeration
bun Tools/SubdomainEnum.ts target.com
# Endpoint discovery from JavaScript
bun Tools/EndpointDiscovery.ts https://target.com
# Port scanning
bun Tools/PortScan.ts target.com
# Path discovery
bun Tools/PathDiscovery.ts https://target.com
Produces structured narrative including:
Generates prioritized attack plan:
| Category | Triggers On |
|---|---|
| Authentication | Auth mechanisms detected |
| Access Control | Multiple user roles |
| Injection | All web apps |
| Data Exposure | Sensitive data identified |
| File Upload | Upload functionality |
| API Security | API endpoints |
| WebSocket | WebSocket detected |
| Business Logic | All web apps |
| Payment Security | Payment flows |
Phase 0: Scoping & Preparation Phase 1: Reconnaissance (Recon skill) Phase 2: Mapping (content discovery) Phase 3: Vulnerability Analysis Phase 4: Exploitation Phase 5: Reporting
Core Assessment:
Workflows/UnderstandApplication.md - Application reconnaissanceWorkflows/CreateThreatModel.md - Attack scenario generationPenetration Testing:
Workflows/Pentest/MasterMethodology.md - 6-phase methodologyWorkflows/Pentest/ToolInventory.md - Security tools referenceWorkflows/Pentest/Reconnaissance.md - Asset discoveryWorkflows/Pentest/Exploitation.md - Vulnerability testingWeb Fuzzing:
Workflows/Ffuf/FfufGuide.md - FFUF fuzzing guideWorkflows/Ffuf/FfufHelper.md - Automated fuzzing helperBug Bounty:
Workflows/BugBounty/Programs.md - Program trackingWorkflows/BugBounty/AutomationTool.md - Bounty automationWeb App Testing:
Workflows/Webapp/TestingGuide.md - Playwright testingWorkflows/Webapp/Examples.md - Testing patternsOSINT:
Workflows/Osint/MasterGuide.md - OSINT methodologyWorkflows/Osint/Reconnaissance.md - Domain reconWorkflows/Osint/SocialMediaIntel.md - SOCMINTWorkflows/Osint/Automation.md - SpiderFoot/MaltegoWorkflows/Osint/MetadataAnalysis.md - ExifTool analysisAI-Powered:
Workflows/VulnerabilityAnalysisGemini3.md - Gemini deep analysisExample 1: Full assessment workflow
User: "Security assessment on app.example.com"
→ Run UnderstandApplication to build narrative
→ Run CreateThreatModel to prioritize testing
→ Follow MasterMethodology with threat model guidance
→ Report findings with OWASP/CWE references
Example 2: Quick threat model
User: "How would I attack this app?"
→ Run CreateThreatModel on target
→ Get prioritized attack paths
→ Get test plan with tool suggestions
Example 3: Integrate with Recon
User: "Assessment on target.com including all subdomains"
→ CorporateStructure (Recon) → Find parent/child companies
→ SubdomainEnum (Recon) → Find all subdomains
→ EndpointDiscovery (Recon) → Extract JS endpoints
→ UnderstandApplication → Build app narrative
→ CreateThreatModel → Generate attack plan