j3ssie/osmedeus

記録された最新のソース活動: 2026年8月8日 14:26

SkillsMP カタログ更新: 2026年11月2日 18:02

収集済み skills: 1

GitHub スター: 6,638
GitHub フォーク: 1,035

AI アシスタントでインストール

このプロンプトをコピーして、使用中の AI アシスタントに送ってください。

Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/j3ssie/osmedeus.

リポジトリの README

README の元ファイル：README.md

README の元ファイルを読む

README 全文を表示

# Osmedeus <a href="https://www.osmedeus.org"><img alt="Osmedeus" src="https://raw.githubusercontent.com/osmedeus/assets/main/osm-logo-with-white-border.png" height="140" /></a> Osmedeus - A Modern Orchestration Engine for Security <a href="https://docs.osmedeus.org/"><img src="https://img.shields.io/badge/Documentation-0078D4?style=for-the-badge&logo=GitBook&logoColor=39ff14&labelColor=black&color=black"></a> <a href="https://docs.osmedeus.org/donation/"><img src="https://img.shields.io/badge/Sponsors-0078D4?style=for-the-badge&logo=GitHub-Sponsors&logoColor=39ff14&labelColor=black&color=black"></a> <a href="https://twitter.com/OsmedeusEngine"><img src="https://img.shields.io/badge/%40OsmedeusEngine-0078D4?style=for-the-badge&logo=Twitter&logoColor=39ff14&labelColor=black&color=black"></a> <a href="https://discord.gg/mtQG2FQsYA"><img src="https://img.shields.io/badge/Discord%20Server-0078D4?style=for-the-badge&logo=Discord&logoColor=39ff14&labelColor=black&color=black"></a> <a href="https://github.com/j3ssie/osmedeus/releases"><img src="https://img.shields.io/github/release/j3ssie/osmedeus?style=for-the-badge&labelColor=black&color=2fc414&logo=Github"></a> ## What is Osmedeus? [Osmedeus](https://www.osmedeus.org) is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and sandboxed execution. Built for both beginners and experts, it delivers powerful, composable automation without sacrificing the integrity and safety of your infrastructure. ## Key Features - **Declarative YAML Workflows** - Define pipelines with hooks, decision routing, module exclusion, and conditional branching across multiple runners (host, Docker, SSH) - **Distributed Execution** - Redis-based master-worker pattern with queue system, webhook triggers, and file sync across workers - **Rich Function Library** - 80+ utility functions including nmap integration, tmux sessions, SSH execution, TypeScript/Python scripting, SARIF parsing, and CDN/WAF classification - **Event-Driven Scheduling** - Cron, file-watch, and event triggers with filtering, deduplication, and delayed task queues - **Agentic LLM Steps** - Tool-calling agent loops with sub-agent orchestration, memory management, and structured output; plus ACP subprocess agents (Claude Code, Codex, OpenCode, Gemini) - **Cloud Infrastructure** - Provision and run scans across DigitalOcean, AWS, GCP, Linode, and Azure with cost controls and automatic cleanup - **Rich CLI Interface** - Interactive database queries, bulk function evaluation, workflow linting, progress bars, and comprehensive usage examples - **REST API & Web UI** - Full API server with webhook triggers, database queries, and embedded dashboard for visualization See [Documentation Page](https://docs.osmedeus.org/) for more details. ## Installation ```bash curl -sSL http://www.osmedeus.org/install.sh | bash ``` ### [npm](https://www.npmjs.com/package/@j3ssie/osmedeus) ```bash npm install -g @j3ssie/osmedeus ``` Ships prebuilt binaries for linux and macOS on x64/arm64. See [Quickstart](https://docs.osmedeus.org/quickstart/) for quick setup and [Installation](https://docs.osmedeus.org/installation/) for advanced configurations. | CLI Usage | Web UI Assets | |-----------|---------------| | ![CLI Usage](https://github.com/osmedeus/docs/blob/main/images/cli/cli-run-with-verbose-output.png?raw=true) | ![Web UI Assets](https://github.com/osmedeus/docs/blob/main/images/web-ui/web-ui-assets.png?raw=true) | | **Workflow Visualization** | **Vulnerabilities** | | ![Workflow Visualization](https://github.com/osmedeus/docs/blob/main/images/web-ui/web-ui-workflow.png?raw=true) | ![Vulnerabilities](https://github.com/osmedeus/docs/blob/main/images/web-ui/web-ui-vuln.png?raw=true) | ## ☁️ Sponsor — Bloome [![Bloome — humans and AI agents, working as one team](assets/bloome-home.png)](https://bloome.im/app?ref=j3ssie&utm_medium=github&utm_source=j3ssie-osmedeus-ivor-202607) Automating recon with Osmedeus? [Bloome](https://bloome.im/app?ref=j3ssie&utm_medium=github&utm_source=j3ssie-osmedeus-ivor-202607) brings that same team-of-agents mindset to the rest of your workflow: multiple AI agents (Claude, ChatGPT, DeepSeek and more) in one shared chat that split the work, hand off tasks, cross-check each other, and refine the output until it's right — triage findings, draft reports, and run scheduled checks together. Zero setup, in the cloud, on web and mobile, and shareable with your team. 👉 [Try Bloome](https://bloome.im/app?ref=j3ssie&utm_medium=github&utm_source=j3ssie-osmedeus-ivor-202607) ## Quick Start ```bash # Run a module workflow osmedeus run -m recon -t example.com # Run a flow workflow osmedeus run -f general -t example.com # Multiple targets with concurrency osmedeus run -m recon -T targets.txt -c 5 # Dry-run mode (preview) osmedeus run -f general -t example.com --dry-run # Start API server osmedeus serve # List available workflows osmedeus workflow list # Query discovered assets osmedeus assets -w example.com # List assets for workspace osmedeus assets --stats # Show unique technologies, sources, types osmedeus assets --source httpx --type web --json # Filter and output as JSON # Query vulnerabilities, runs, and steps osmedeus query vulns --severity high --workspace example.com osmedeus query runs --status running osmedeus query steps --run <run-uuid> # Query database tables osmedeus db list --table runs osmedeus db list --table event_logs --search "nuclei" # Evaluate utility functions osmedeus func eval 'log_info("hello")' osmedeus func eval -e 'http_get("https://example.com")' -T targets.txt -c 10 # Platform variables available in eval osmedeus func eval 'log_info("OS: " + PlatformOS + ", Arch: " + PlatformArch)' # Install from preset repositories osmedeus install base --preset osmedeus install base --preset --keep-setting # preserve existing osm-settings.yaml osmedeus install workflow --preset # Exclude modules from flow execution osmedeus run -f general -t example.com -x portscan osmedeus run -f general -t example.com -X vuln # Fuzzy exclude by substring # Worker queue system osmedeus worker queue new -f general -t example.com # Queue for later osmedeus worker queue run --concurrency 5 # Process queue # Worker management osmedeus worker status # Show workers osmedeus worker eval -e 'ssh_exec("host", "whoami")' # Eval with distributed hooks # Run an ACP agent interactively osmedeus agent "analyze this codebase" osmedeus agent --agent codex "explain main.go" osmedeus agent --list # Cloud infrastructure management osmedeus cloud create --instances 3 # Provision cloud machines osmedeus cloud setup 1.2.3.4 5.6.7.8 # Setup existing machines osmedeus cloud list # List active infrastructure osmedeus cloud run -f general -t example.com --instances 3 # Show all usage examples osmedeus --usage-example ``` ## Docker ```bash # Show help docker run --rm j3ssie/osmedeus:latest --help # Run a scan docker run --rm -v $(pwd)/output:/root/workspaces-osmedeus \ j3ssie/osmedeus:latest run -f general -t example.com ``` For more CLI usage and example commands, refer to the [CLI Reference](https://docs.osmedeus.org/getting-started/cli). ## High-Level Architecture ```plaintext ┌───────────────────────────────────────────────────────────────────────────┐ │ Osmedeus Orchestration Engine │ ├───────────────────────────────────────────────────────────────────────────┤ │ ENTRY POINTS │ │ ┌──────────┐ ┌──────────┐ ┌──────────┐ ┌─────────────┐ │ │ │ CLI │ │ REST API │ │Scheduler │ │ Distributed │ │ │ └────┬─────┘ └────┬─────┘ └────┬─────┘ └─────┬───────┘ │ │ └─────────────┴─────────────┴──────────────┘ │ │ │ │ │ ▼ │ │ ┌─────────────────────────────────────────────────────────────────────┐ │ │ │ CONFIG ──▶ PARSER ──▶ EXECUTOR ──▶ STEP DISPATCHER ──▶ RUNNER │ │ │ │ │ │ │ │ │ Step Executors: bash | function | parallel | foreach | remote-bash │ │ │ │ http | llm | agent | agent-acp | SARIF/SAST │ │ │ │ Hooks: pre_scan_steps → [main steps] → post_scan_steps │ │ │ │ │ │ │ │ │ Runners: HostRunner | DockerRunner | SSHRunner │ │ │ │ Queue: DB + Redis polling → dedup → concurrent execution │ │ │ └─────────────────────────────────────────────────────────────────────┘ │ └───────────────────────────────────────────────────────────────────────────┘ ``` For more information about the architecture, refer to the [Architecture Documentation](https://docs.osmedeus.org/architecture). ## Roadmap and Status The high-level ambitious plan for the project, in order: | # | Step | Status | | :-: | --------------------------------------------------------------------------- | :----: | | 1 | Osmedeus Engine reforged with a next-generation architecture | ✅ | | 2 | Flexible workflows and step types | ✅ | | 3 | Event-driven architectural model and the different trigger event categories | ✅ | | 4 | Beautiful UI for visualize results and workflow diagram | ✅ | | 5 | Rewriting the workflow to adapt to new architecture and syntax | ✅ | | 6 | Testing more utility functions like notifications | ✅ | | 7 | SAST integration with SARIF parsing (Semgrep, Trivy, etc.) | ✅ | | 8 | Cloud integration, which supports running the scan on the cloud provider. | ✅ | | 9 | Generate diff reports showing new/removed/unchanged assets between runs. | ❌ | | 10 | Adding step type from cloud provider that can be run via serverless | ❌ | | N | Fancy features (to be discussed later) | ❌ | ## Documentation | Topic | Link | |----------------------|----------------------------------------------------------------------------------------------------------| | Getting Started | [docs.osmedeus.org/getting-started](https://docs.osmedeus.org/getting-started) | | CLI Usage & Examples | [docs.osmedeus.org/getting-started/cli](https://docs.osmedeus.org/getting-started/cli) | | Writing Workflows | [docs.osmedeus.org/workflows/overview](https://docs.osmedeus.org/workflows/overview) | | Event-Driven Triggers| [docs.osmedeus.org/advanced/event-driven](https://docs.osmedeus.org/advanced/event-driven) | | Deployment | [docs.osmedeus.org/deployment](https://docs.osmedeus.org/deployment) | | Architecture | [docs.osmedeus.org/concepts/architecture](https://docs.osmedeus.org/concepts/architecture) | | Development | [docs.osmedeus.org/development](https://docs.osmedeus.org/development) and [HACKING.md](HACKING.md) | | Extending Osmedeus | [docs.osmedeus.org/development/extending-osmedeus](https://docs.osmedeus.org/development/extending-osmedeus) | | Security Model | [SECURITY.md](SECURITY.md) and [docs.osmedeus.org/others/security-warning](https://docs.osmedeus.org/others/security-warning) | | Full Documentation | [docs.osmedeus.org](https://docs.osmedeus.org) | ## Disclaimer **Osmedeus** is designed to execute arbitrary code and commands from user supplied input via CLI, API, and workflow definitions. This flexibility is intentional and central to how the engine operates. Please refer to the [⚠️ Security Warning](https://docs.osmedeus.org/others/security-warning) page for more information on how to stay safe. [SECURITY.md](SECURITY.md) draws the line between the code execution that is intentional and what counts as a vulnerability, and is where to start if you want to report one. **Think twice before you:** - Run workflows downloaded from untrusted sources - Execute commands or scans against targets you don't own or have permission to test - Use workflows without reviewing their contents first You are responsible for what you run. Always review workflow YAML files before execution, especially those obtained from third parties. ## License Osmedeus is made with ♥ by [@j3ssie](https://twitter.com/j3ssie) and it is released under the MIT license.

リポジトリの README を読み込んでいます…

このリポジトリの skills

情報セキュリティアナリスト

1 件の職業カテゴリ · 100% 分類済み

skill

職業分類

説明

更新

osmedeus-expert

情報セキュリティアナリスト

Expert guide for the Osmedeus security automation workflow engine. Use when: (1) writing or editing YAML workflows (modules and flows), (2) running osmedeus CLI commands (scan, workflow management, installation, server), (3) configuring steps, runners,…

原文の言語: 英語

2026-08-08

収集済み skill 1 件中 1 件を表示しています。