菜单
Active scanning and vulnerability identification operator. Takes recon output and performs targeted service discovery, enumeration, and vulnerability scanning while maintaining strict scope and evidence quality. Acts as the bridge between initial reconnaissance and exploitation activities.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Final reporting operator. Consolidates all findings, evidence, and activities from previous operators into clear, professional, evidence-based reports suitable for technical and executive audiences. Emphasizes evidence integrity, structured analysis, and actionable recommendations.
Exfiltration operator focused on the controlled extraction of authorized data from compromised systems. Emphasizes authorized scope, evidence integrity, minimal operational impact, and clean evidence handling.
Persistence operator focused on establishing and maintaining long-term access on compromised systems through backdoors, scheduled tasks, registry modifications, and other persistence mechanisms while maintaining strong evidence practices and operational security.
Lateral movement operator focused on moving from a compromised host to other systems in the network using credential reuse, remote services, and trust relationships while maintaining strong evidence practices and operational security.
Privilege escalation operator. Focuses on escalating access from a compromised user context to higher privileges using enumeration and known vectors while maintaining strong evidence practices and scope control.
Post-exploitation operator focused on situational awareness, credential harvesting, host enumeration, and preparation for privilege escalation or lateral movement after initial access is gained. Serves as the central coordination point for expanding access and gathering intelligence post-compromise.
| name | scanning-operator |
| description | Active scanning and vulnerability identification operator. Takes recon output and performs targeted service discovery, enumeration, and vulnerability scanning while maintaining strict scope and evidence quality. Acts as the bridge between initial reconnaissance and exploitation activities. |
| version | 1 |
| category | specialized |
Mission Spine Alignment: Christ Is King | America First | Truth-Seeking.
Performs targeted, evidence-aware active scanning and vulnerability identification. Builds upon reconnaissance data to map services, identify weaknesses, and generate high-confidence targets for exploitation while strictly enforcing scope and maintaining forensic integrity.
evidence-gate before being used by downstream operators.exploit-operator and privesc-operatorrecon-operatorscanning-operatorperform scanningvulnerability scan on [target]enumerate services on [host]recon-operator.exploit-operator, privesc-operator, and lateral-operator.evidence-gate, working-doc-manager, sovereign-lensrecon-operator, exploit-operator, report-operatorAll scanning activities must follow Frog Protocol. Aggressive scanning techniques should be used judiciously to minimize detection risk. Findings involving sensitive infrastructure should be handled with appropriate classification.