القائمة
Autonomous penetration-testing AI agents. Registered as an external integration only; not activated by default. Useful reference for multi-step offensive workflows, sandboxing, and tool gating.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use when: applying Matt Pocock engineering skills for diagnosis, TDD, architecture improvement, issue breakdown, PRD creation, or rigorous TypeScript/codebase analysis.
Find deepening opportunities in a codebase, informed by the domain language in CONTEXT.md and the decisions in docs/adr/. Use when the user wants to improve architecture, find refactoring opportunities, consolidate tightly-coupled modules, or make a codebase more testable and AI-navigable.
Sets up an `## Agent skills` block in AGENTS.md/CLAUDE.md and `docs/agents/` so the engineering skills know this repo's issue tracker (GitHub or local markdown), triage label vocabulary, and domain doc layout. Run before first use of `to-issues`, `to-prd`, `triage`, `diagnose`, `tdd`, `improve-codebase-architecture`, or `zoom-out` — or if those skills appear to be missing context about the issue tracker, triage labels, or domain docs.
Break a plan, spec, or PRD into independently-grabbable issues on the project issue tracker using tracer-bullet vertical slices. Use when user wants to convert a plan into issues, create implementation tickets, or break down work into issues.
Turn the current conversation context into a PRD and publish it to the project issue tracker. Use when user wants to create a PRD from the current context.
Use when: working with OpenAI Codex plugins, plugin marketplaces, plugin manifests, plugin-bundled skills, or the openai/plugins repository. Helps inspect .codex-plugin/plugin.json, .agents/plugins/marketplace.json, and installed Codex plugin cache.
| name | pentagi |
| description | Autonomous penetration-testing AI agents. Registered as an external integration only; not activated by default. Useful reference for multi-step offensive workflows, sandboxing, and tool gating. |
| source | https://github.com/vxcontrol/pentagi |
| integration | external-agent |
| status | vendored-reference-offensive |
| vendored-at | third_party/pentagi |
| pinned-ref | main |
| fetch-requires | -AllowOffensive |
Descriptor-only registration (P9 batch). The real project is a Go/TypeScript multi-agent pentest framework; integrating it requires explicit allowlist plus isolated network namespaces and is gated behind a future skills-install --allow-network-offensive flag.
RuntimeToolExecutor permission/circuit-breaker design overlaps in spirit.pentagi-mcp) with its own approval gate..octocode/config.toml key integrations.pentagi.enabled = true.Offensive tooling. Do NOT auto-invoke. All tool calls must require human approval.