aiscan

Use this skill when the agent needs to understand aiscan mechanisms, available capabilities, scanner pseudo-commands, and tool invocation rules.

Use this skill when working with proton for sensitive information scanning — detecting API keys, tokens, credentials, and secrets in files or piped data.

Use this skill to learn how to use the playwright pseudo-command for headless browsing, screenshots, network capture, and interactive vulnerability verification. Aligned with microsoft/playwright-cli conventions.

Use this skill when working with scan for the multi-stage aiscan pipeline across discovery, web probing, weak credentials, POC checks, and verification.

Use this skill when working with neutron for template-based POC execution, template filtering, and POC result analysis.

Use this skill when working with gogo for host, port, service, banner, fingerprint, or vulnerability-hint discovery.

Use katana for deep web crawling with full parameter discovery. Produces URLs with query strings, form targets, and JS endpoints that spray crawl strips.

Use this skill when working with zombie for authorized weak credential checks and authentication result analysis.

Use passive to expand domains/ICPs into cyberspace assets like IPs, URLs, ports via uncover (FOFA, Hunter, Shodan, Censys, etc.). Run before active scanners (gogo, spray, katana).

Use this skill when working with spray for web probing, HTTP fingerprints, exposed paths, and application analysis.