메뉴
Comprehensive system control operations for security testing. Use this skill when you need unified access to file operations, process management, system information, and command execution through a single interface during authorized penetration testing.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | system-control |
| description | Comprehensive system control operations for security testing. Use this skill when you need unified access to file operations, process management, system information, and command execution through a single interface during authorized penetration testing. |
| version | 1.0.0 |
| author | Secbot Security Team |
| tags | ["system","control","unified","operations","security"] |
| triggers | ["system_control","file_ops","process_control","sysinfo","operations"] |
| prerequisites | ["authorized_target"] |
This skill provides a unified interface for system operations during security assessments, combining file management, process control, system information, and command execution.
List files in a directory.
{
"action": "list_files",
"path": "C:\\temp",
"recursive": false
}
Read file contents.
{
"action": "read_file",
"file_path": "C:\\notes\\info.txt"
}
Write content to file.
{
"action": "write_file",
"file_path": "C:\\output\\findings.txt",
"content": "Security findings..."
}
Create new directory.
{
"action": "create_directory",
"dir_path": "C:\\temp\\scan_results"
}
Delete files or directories.
{
"action": "delete_file",
"file_path": "C:\\temp\\temp.txt"
}
Copy or move files.
{
"action": "copy_file",
"src": "C:\\source\\file.txt",
"dst": "C:\\dest\\file.txt"
}
Get file metadata.
{
"action": "get_file_info",
"file_path": "C:\\Windows\\notepad.exe"
}
List all running processes.
{
"action": "list_processes"
}
Optional: filter by name
{
"action": "list_processes",
"filter_name": "svchost"
}
Get detailed process information.
{
"action": "get_process_info",
"pid": 1234
}
Terminate a process.
{
"action": "kill_process",
"pid": 1234
}
Get CPU details.
{
"action": "get_cpu_info"
}
Get memory usage.
{
"action": "get_memory_info"
}
Get disk partition information.
{
"action": "get_disk_info"
}
Get network interface details.
{
"action": "get_network_info"
}
Execute system commands.
{
"action": "execute_command",
"command": "ipconfig /all",
"shell": true,
"timeout": 30
}
Get specific environment variable.
{
"action": "get_env",
"key": "PATH"
}
Set environment variable.
{
"action": "set_env",
"key": "TEST_VAR",
"value": "test_value"
}
List all environment variables.
{
"action": "list_env"
}
Get current working directory.
{
"action": "get_current_directory"
}
Change working directory.
{
"action": "change_directory",
"path": "C:\\temp"
}
Check if path exists.
{
"action": "path_exists",
"path": "C:\\Windows"
}
[
{ "action": "get_system_info" },
{ "action": "get_cpu_info" },
{ "action": "get_memory_info" },
{ "action": "get_network_info" },
{ "action": "get_disk_info" },
{ "action": "get_current_directory" }
]
[
{ "action": "list_processes" },
{ "action": "list_processes", "filter_name": "svchost" },
{ "action": "get_process_info", "pid": "<suspicious_pid>" },
{ "action": "kill_process", "pid": "<malware_pid>" }
]
[
{ "action": "list_files", "path": "C:\\Users", "recursive": false },
{ "action": "list_files", "path": "C:\\", "recursive": false },
{ "action": "read_file", "file_path": "C:\\Windows\\System32\\drivers\\etc\\hosts" },
{ "action": "write_file", "file_path": "C:\\temp\\findings.txt", "content": "Scan results..." }
]
[
{ "action": "get_network_info" },
{ "action": "execute_command", "command": "netstat -ano" },
{ "action": "execute_command", "command": "arp -a" },
{ "action": "execute_command", "command": "ipconfig /all" }
]
[
{ "action": "execute_command", "command": "whoami /all" },
{ "action": "execute_command", "command": "id" },
{ "action": "execute_command", "command": "net localgroup Administrators" },
{ "action": "execute_command", "command": "sc query" }
]
[
{ "action": "get_system_info" },
{ "action": "list_processes" },
{ "action": "get_network_info" },
{ "action": "get_disk_info" },
{ "action": "list_env" }
]
[
{ "action": "list_processes", "filter_name": "exe_name" },
{ "action": "get_process_info", "pid": 1234 },
{ "action": "get_file_info", "file_path": "C:\\path\\to\\malware.exe" },
{ "action": "write_file", "file_path": "C:\\temp\\malware_analysis.txt", "content": "Analysis results..." },
{ "action": "kill_process", "pid": 1234 }
]
[
{ "action": "get_system_info" },
{ "action": "get_cpu_info" },
{ "action": "get_memory_info" },
{ "action": "get_network_info" },
{ "action": "execute_command", "command": "whoami /all" },
{ "action": "write_file", "file_path": "C:\\temp\\assessment_report.txt", "content": "Report content..." }
]
Always Check Success
success: true in responseUse Appropriate Timeouts
Security Considerations
Error Handling
{
"success": true,
"result": "<operation result>"
}
Or on failure:
{
"success": false,
"error": "error message"
}
| Error | Cause | Solution |
|---|---|---|
| "未知操作" | Invalid action name | Check available_actions |
| "Permission denied" | Insufficient privileges | Run with elevated permissions |
| "File not found" | Path doesn't exist | Verify path with path_exists |
| "Access denied" | Protected resource | Check file/directory permissions |
| "Command timeout" | Operation took too long | Increase timeout value |
Some actions accept additional parameters in a kwargs object:
{
"action": "list_files",
"kwargs": {
"path": "C:\\temp",
"recursive": false
}
}
This format is automatically handled by the tool.
Route shell, runtime.command, runtime.script, mcp.call, cli.run, or task_graph.submit work through Secbot's ExecGo-backed control tools.
System-level commands for security assessment and system enumeration. Use this skill when performing local system reconnaissance, process analysis, or system information gathering during authorized security testing.
Security-focused command execution techniques for penetration testing. Use this skill when executing system commands during authorized security assessments. Covers Windows and Linux command execution, common security testing commands, and best practices for avoiding detection.
Persistent terminal session management for security testing. Use this skill when you need an interactive shell session that maintains state between commands (working directory, environment variables, etc.) during authorized penetration testing.
Professional nmap scanning techniques and optimization for penetration testing. Use this skill when you need to perform network reconnaissance, port scanning, or service enumeration during authorized security assessments.