메뉴
Katana crawl (+ optional Dirsearch). Writes discovery/katana_urls.txt under WORKSPACE_ROOT/{task_id}/web-vuln/{run_id}/. Default depth=2, `-ct` crawl cap, `-ef` static extensions filter; pair with dispatcher → nuclei.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Fast HTTP probing and lightweight fingerprinting using ProjectDiscovery httpx. Use for web recon with redirect-awareness and JSON output.
V5 样板 Micro-Skill：Pydantic 入参、micro_executor SDK、落盘 parsed.json、stderr S-06、stdout Agent 摘要 JSON（嵌入 raw_stdout）。
Build a basic understanding of the current project by scanning source code and available docs. Use when user asks for /init, project onboarding, quick repo familiarization, or initial architecture context.
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
Raw HTTP probing with curl. Use for custom method, headers and body requests in recon and validation.
Advanced web path scanner using multithreaded brute-force. Use for discovering hidden files, directories, and endpoints on web servers.
| name | katana |
| description | Katana crawl (+ optional Dirsearch). Writes discovery/katana_urls.txt under WORKSPACE_ROOT/{task_id}/web-vuln/{run_id}/. Default depth=2, `-ct` crawl cap, `-ef` static extensions filter; pair with dispatcher → nuclei. |
| metadata | {"openclaw":{"emoji":"🕸️","requires":{"bins":["katana","dirsearch"],"env":[]},"primaryEnv":null}} |
run_id and paths in parsed_artifacts.operation=prepare (or default) and the same run_id.chunk_index 1..N), then dispatcher with operation=finalize.| Param | Description |
|---|---|
target_url / url / target | Required seed URL |
run_id | Optional; generated if omitted (pass to dispatcher/nuclei) |
timeout | Total seconds (default 600) |
katana_depth | Default 2 |
katana_crawl_duration | Default 60s (-ct，单目标爬取时长上限) |
katana_exclude_extensions | 默认一组静态后缀，经 -ef 从输出中过滤 |
katana_concurrency | Default 40 |
katana_form_extraction | Default true (-fx -j) |
skip_dirsearch | Skip Dirsearch phase（默认跳过内置 dirsearch） |
headless_js / frontend_framework | If Vue/React/Angular or KATANA_JS=1, adds -jc for JS render |
auth_header | Passed to Katana -H |
risk_profile | waf_suspected lowers concurrency |
Outputs live under {WORKSPACE_ROOT}/{task_id}/web-vuln/{run_id}/discovery/.
Horizontal scaling with a dedicated discovery_queue is not wired in the executor by default. Use the platform execute_tasks queue + mq-worker, or add a dedicated consumer that unmarshals the same JSON payload as HTTP execution. Use prefetch_count=1 on the consumer to avoid heartbeat loss on long crawls.
Build: pentest-skill-katana:latest via skills/docker-compose.yml (skill-katana).