菜单
Autonomous penetration-testing AI agents. Registered as an external integration only; not activated by default. Useful reference for multi-step offensive workflows, sandboxing, and tool gating.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when: applying Matt Pocock engineering skills for diagnosis, TDD, architecture improvement, issue breakdown, PRD creation, or rigorous TypeScript/codebase analysis.
Find deepening opportunities in a codebase, informed by the domain language in CONTEXT.md and the decisions in docs/adr/. Use when the user wants to improve architecture, find refactoring opportunities, consolidate tightly-coupled modules, or make a codebase more testable and AI-navigable.
Sets up an `## Agent skills` block in AGENTS.md/CLAUDE.md and `docs/agents/` so the engineering skills know this repo's issue tracker (GitHub or local markdown), triage label vocabulary, and domain doc layout. Run before first use of `to-issues`, `to-prd`, `triage`, `diagnose`, `tdd`, `improve-codebase-architecture`, or `zoom-out` — or if those skills appear to be missing context about the issue tracker, triage labels, or domain docs.
Break a plan, spec, or PRD into independently-grabbable issues on the project issue tracker using tracer-bullet vertical slices. Use when user wants to convert a plan into issues, create implementation tickets, or break down work into issues.
Turn the current conversation context into a PRD and publish it to the project issue tracker. Use when user wants to create a PRD from the current context.
Use when: working with OpenAI Codex plugins, plugin marketplaces, plugin manifests, plugin-bundled skills, or the openai/plugins repository. Helps inspect .codex-plugin/plugin.json, .agents/plugins/marketplace.json, and installed Codex plugin cache.
| name | pentagi |
| description | Autonomous penetration-testing AI agents. Registered as an external integration only; not activated by default. Useful reference for multi-step offensive workflows, sandboxing, and tool gating. |
| source | https://github.com/vxcontrol/pentagi |
| integration | external-agent |
| status | vendored-reference-offensive |
| vendored-at | third_party/pentagi |
| pinned-ref | main |
| fetch-requires | -AllowOffensive |
Descriptor-only registration (P9 batch). The real project is a Go/TypeScript multi-agent pentest framework; integrating it requires explicit allowlist plus isolated network namespaces and is gated behind a future skills-install --allow-network-offensive flag.
RuntimeToolExecutor permission/circuit-breaker design overlaps in spirit.pentagi-mcp) with its own approval gate..octocode/config.toml key integrations.pentagi.enabled = true.Offensive tooling. Do NOT auto-invoke. All tool calls must require human approval.