菜单
Prepare the battlefield — recon, scanning, and surface ranking. Stops before hunting. Run /hunt or /autopilot after. Usage: /pipeline or /pipeline <target>
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]
Adversarial validator for DAST findings. Attempts to DISPROVE each finding and DOWNGRADE severity. Catches inflated reports, unverified assumptions, and theoretical-only bugs. Dispatch after /validate PASS and before /report.
Server-Side Template Injection specialist. Covers Jinja2 (H1 #74), Twig, Velocity, FreeMarker, ERB, Handlebars, Thymeleaf. Use for any rule-engine, comment/message rendering, PR automation, admin template, or user-customizable template surface. Systematic blocklist mapper + CVE bypass runner + runtime-vs-parse distinguisher.
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]
| name | pipeline |
| description | Prepare the battlefield — recon, scanning, and surface ranking. Stops before hunting. Run /hunt or /autopilot after. Usage: /pipeline or /pipeline <target> |
Prepare the battlefield for: $ARGUMENTS
This command runs recon, scanning, and surface ranking — everything needed BEFORE hunting.
It does NOT hunt, validate, or report. Use /hunt or /autopilot for that.
scope.yaml — resolve and verify targets
$ARGUMENTS is empty: uv run python3 ../../tools/scope_check.py --list$ARGUMENTS is a domain: uv run python3 ../../tools/scope_check.py $ARGUMENTSpolicy.md — extract policy preamble for all agent dispatchesuv run python3 ../../tools/brain.py inituv run python3 ../../tools/brain.py brief <target>recon agent (model: inherit) with policy preamble and scopeconfig-auditor agent (model: inherit) for header/TLS/cookie reviewjs-analyzer agent (model: inherit) for JavaScript analysisuv run python3 ../../tools/brain.py record <target> recon "<results summary>"vuln-scanner agent with nuclei on discovered hostswaf-profiler agent on primary targetsrecon-ranker agent (model: inherit) with recon data + brain knowledgeBattlefield ready.
P1 targets: [list]
P2 targets: [list]
Kill list: [list]
Next steps:
/hunt <target> — manual hunting on a specific target
/autopilot — autonomous hunting across all P1 targets
/surface — re-rank surface with current brain knowledge
Sync brain: uv run python3 ../../tools/global_brain.py sync-from-local
The pipeline prepares a battlefield, not a folder of scan files.
out-of-scope with reason.P1, P2, and Kill lists plus the best first vuln class for each P1. If no P1 exists, say why and recommend monitoring or a different program.