初始化渗透测试环境——检查并安装 Playwright 浏览器、Docker Kali 镜像等依赖。
实战 SRC / 众测 / Bug bounty 漏洞挖掘 playbook 库（在 pentester 框架中以 playbook 源方式使用，不独立触发工作流）。包含：19 个攻击类 playbook（SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS）、305 个结构化 payload、263 个 WAF/EDR 绕过变体、2887 份 HackerOne 真实 High/Critical 已披露案例、国产 OA / 中间件指纹库。
Query, create, update, and organize reusable penetration testing knowledge under .pentester/knowledge. Manually triggered via /pentester:knowledge-base.
Discover and invoke MCP tools registered in `.pentester/mcp/`. Automatically consulted before each PTES phase. Manually triggered via /pentester:mcp.
Collect current project penetration test data and generate a final report following the PTES report template. Manually triggered via /pentester:gen-report.
Run comprehensive service enumeration on a target including port scanning, version detection, and protocol-specific enumeration. Manually triggered via /pentester:enum-services or auto-suggested after target initialization.
Initialize target directory structure and Docker container for a new penetration test target. Manually triggered via /pentester:init-target or auto-suggested when a new target IP is provided.
Collect solutions from all target/ directories and merge them into .pentester/solutions.md without deleting any existing solutions. Manually triggered via /pentester:update-solution.