用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/PurpleAILAB/Decepticon --skill chain-idor-to-priv-esc命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
7-question gate run before promoting a finding to FINDING + opening a report. Kills weak/non-impactful findings before they reach the report stage and damage validity ratio.
Stage 3 triage and verification playbook. Crafts minimal PoCs, runs them with ZFP controls, promotes validated bugs to FINDING nodes with CVSS. Load at verifier-agent startup.
Mandatory first-turn startup procedure — checks for existing engagements, resume/new selection, workspace initialization.
正在显示 SKILL.md
基于 SOC 职业分类
| name | chain-idor-to-priv-esc |
| description | Build chains where IDOR enables privilege escalation and high-impact control-plane actions. |
| metadata | {"subdomain":"web-exploitation","when_to_use":"idor chain privilege escalation control plane high impact horizontal vertical authorization bypass"} |
Demonstrate before/after authorization state and downstream privileged action evidence.