dazeb

Red team engagement lifecycle management — initiation, phase transitions, go/no-go gates, deconfliction, emergency procedures, completion.

Mandatory first-turn startup procedure — checks for existing engagements, resume/new selection, workspace initialization.

Final engagement report generation — executive summary, technical report, findings aggregation, attack path narrative, detection gap matrix, remediation roadmap.

Decepticon orchestrator patterns — delegation, state management, adaptive re-planning, context handoff protocols.

Use when setting up, running, or managing the Botron autonomous red team agent — Docker-based multi-provider LLM pentesting framework. Covers install, demo, service management, testing, and provider configuration.

Sliver C2 framework operations — server connection, listener setup, implant generation, BOF/Armory extensions, post-implant operations, HTTP C2 profiles.

Stage 1 broad-spectrum scanner playbook. Sharded sweep over very large codebases producing CANDIDATE nodes for the Detector to reason about. Load at scanner-agent startup.

Top-level orchestration skill — execution order and dependencies across all Decepticon skills.

Arsenal offensive security agent — 5-phase attack workflow. When a user asks to attack, hack, pentest, or assess a target, follow this skill. 764 cybersecurity skills, 22 lab targets, real recon tools (nmap, dig, curl, openssl).

Phase 3 — Execution. Run matched exploit playbooks against lab targets. Triggered by arsenal-phase-skill-match when SKILLS_MATCHED is found.

Phase 5 — Notification. Deliver pipeline results via Telegram message. Terminal link for any phase — starter failure, recon no-targets, execution critical findings, or final report.

Phase 1 — Reconnaissance. Run nmap, dig, curl, openssl against lab targets. Triggered by arsenal-pipeline-starter when TARGETS_READY is found.

Phase 4 — Report. Compile execution findings into a structured markdown report. Triggered by arsenal-phase-execute when EXECUTION_COMPLETE is found.

Phase 2 — Skill Selection. Map recon findings to specific exploit skills from the 764-skill catalog. Triggered by arsenal-phase-recon when RECON_COMPLETE is found.

Entry point for the Arsenal automated attack pipeline. Cron-triggered daily scan of lab targets. Chains through recon → skill-match → execute → report → notify.

Pentesting Proxmox VE hypervisors — KVM/QEMU guest escape, LXC breakouts, Proxmox API/web interface exploitation, VM disk access, network pivoting, and post-exploitation. Use when testing Proxmox-managed virtualization environments.

Full supply-chain attack simulation — initial compromise, dependency poisoning, artifact tampering, dev secrets exfiltration. Covers Proxmox container lab setup and multi-phase attack chain with real-world parallels (SolarWinds, CodeCov, 3CX, LastPass).

Pentesting Proxmox VE hypervisors — KVM/QEMU guest escape, LXC breakouts, Proxmox API/web interface exploitation, VM disk access, network pivoting, and post-exploitation. Use when testing Proxmox-managed virtualization environments.

Full supply-chain attack simulation — initial compromise, dependency poisoning, artifact tampering, dev secrets exfiltration. Covers Proxmox container lab setup and multi-phase attack chain with real-world parallels (SolarWinds, CodeCov, 3CX, LastPass).

Use when building or refactoring React and Tailwind UI that keeps drifting into generic AI-dashboard styling and needs a repeatable visual audit loop.

Generates an AI agent's visual identity (avatar) and accepts testnet USDC payments on Base/Arc.

Multi-provider free-model manager for Hermes. Browse, switch, and auto-rotate across 9 providers and 43+ free AI models via the freeride CLI. Triggers: user asks about free models, wants to switch models mid-task, mentions big-pickle/qwen3.5/llama/local, watcher daemon, quota exhaustion, or model rotation.

Integrate the Merge Gateway SDK into an existing Python or TypeScript/Node project. Detects existing LLM stack, installs the SDK, migrates client constructors and API calls to Merge Gateway's unified format, sets up credentials, and verifies the integration.

Universal agent skill for interacting with the MOLTEX PRO Agent Memecoin Exchange. Enables autonomous agents to manage $MOLT wallets, trade bonding curve tokens, mint new assets, and participate in bounties and duels. Works with any agent framework — Hermes, Claude Code, Codex, OpenClaw, Cursor, or raw terminal.

Use when configuring Sentinel for OpenClaw memory save/search and heartbeat reliability checks.