メニュー
Run security scans against Rockport deployment. Use when the user says 'pentest', 'security scan', 'check for vulns', 'test WAF', 'security audit', 'run pentest', or 'scan rockport'.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/matthewdeaves/rockport --skill pentestコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
Diagnose, fix, and advise on Rockport infrastructure issues. ALWAYS USE THIS SKILL when the user asks anything about Rockport infrastructure — including casual questions like 'is it ok', 'is it up', 'is it working', 'check the infra', 'how's rockport', 'did the deploy work', or 'is everything healthy'. Also use when: debugging errors (timeouts, 403s, 502s, model not found), checking health or status, receiving error output from another Claude instance using Rockport, investigating spend or cost issues, troubleshooting video/image generation failures, or when the user mentions rockport is down, broken, slow, or erroring. Also use when the user pastes HTTP error responses from an OpenAI-compatible API that routes through Rockport.
Detect drift between pentest suite and codebase. Use when the user says 'align pentests', 'check pentest coverage', 'pentest drift', or 'pentest sync'.
Review and triage pentest scan results. Use when the user says 'review pentest', 'check scan results', 'what failed', 'pentest findings', or 'triage results'.
SOC 職業分類に基づく
SKILL.md を表示中
| name | pentest |
| description | Run security scans against Rockport deployment. Use when the user says 'pentest', 'security scan', 'check for vulns', 'test WAF', 'security audit', 'run pentest', or 'scan rockport'. |
| user-invocable | true |
| argument-hint | [target] [--module name] [--skip modules] [--rate n] |
| allowed-tools | Read, Grep, Glob, Bash, Agent |
| effort | high |
$ARGUMENTS
You MUST consider the user input before proceeding (if not empty).
Run security tests against the live Rockport deployment and produce a classified findings report.
which curl jq terraform aws and check pentest/tools/ for optional tools (ffuf, nuclei, testssl.sh). Report what's available. Note: terraform and aws are required for auth bootstrap and the infra moduleParse arguments from user input:
rockport--module, --skip, --rate flags if present--yes only if user explicitly confirmedFor full scans, run in a background subagent (avoids timeout issues):
cd pentest && ./pentest.sh run rockport [options]
After the scan completes, produce a quick module status table from results.json:
REPORT=$(ls -td pentest/reports/rockport/*/ 2>/dev/null | head -1)
jq -r '.modules[] | "\(.module)\t\(.status)\tP:\(.pass) F:\(.fail) S:\(.skip) I:\(.info)\t\(.duration)s"' "$REPORT/results.json"
## Pentest Scan Complete: <target>
**Date**: <timestamp>
**Modules**: N run, N passed, N failed, N skipped
### Module Summary
| Module | Status | Duration | Pass | Fail | Skip |
|--------|--------|----------|------|------|------|
| ... | ... | ... | ... | ... | ... |
Run `/pentest-review` for deep analysis and finding classification.
run_in_background: true for full scans to avoid timeout issues--yes only if user explicitly confirmed/pentest-review, not here