菜单
Phase 1 — Reconnaissance. Run nmap, dig, curl, openssl against lab targets. Triggered by arsenal-pipeline-starter when TARGETS_READY is found.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Arsenal offensive security agent — 5-phase attack workflow. When a user asks to attack, hack, pentest, or assess a target, follow this skill. 764 cybersecurity skills, 22 lab targets, real recon tools (nmap, dig, curl, openssl).
Phase 3 — Execution. Run matched exploit playbooks against lab targets. Triggered by arsenal-phase-skill-match when SKILLS_MATCHED is found.
Phase 5 — Notification. Deliver pipeline results via Telegram message. Terminal link for any phase — starter failure, recon no-targets, execution critical findings, or final report.
Phase 4 — Report. Compile execution findings into a structured markdown report. Triggered by arsenal-phase-execute when EXECUTION_COMPLETE is found.
Phase 2 — Skill Selection. Map recon findings to specific exploit skills from the 764-skill catalog. Triggered by arsenal-phase-recon when RECON_COMPLETE is found.
Entry point for the Arsenal automated attack pipeline. Cron-triggered daily scan of lab targets. Chains through recon → skill-match → execute → report → notify.
| name | arsenal-phase-recon |
| description | Phase 1 — Reconnaissance. Run nmap, dig, curl, openssl against lab targets. Triggered by arsenal-pipeline-starter when TARGETS_READY is found. |
Run full reconnaissance against all ready targets. Use the Arsenal CLI recon tools plus direct terminal commands for deeper scanning.
Parse the incoming output for TARGETS_READY line:
TARGETS_READY: name|IP:port|type, name|IP:port|typeFor each Docker target:
arsenal_recon(target="<IP>", operation="all") to gather: subdomain enum, DNS recon, port scan, tech detection, cert scan, HTTP probeFor each Proxmox LXC target:
arsenal_recon(target="<IP>", operation="all")For each target found, compile recon findings:
Output findings in structured format:
RECON_COMPLETE: <target_name>
ports: 80(http), 443(https), 22(ssh), 3306(mysql)
web: Apache/2.4.41, PHP/7.4, WordPress
db: MySQL/8.0 on :3306
notes: Login page at /wp-admin, XML-RPC enabled
RECON_COMPLETE: <next_target>
...
on_complete: