菜单
Domain reconnaissance coordinator that orchestrates subdomain discovery and port scanning to build comprehensive domain attack surface inventory
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
MKS (Metasploit-Kali Server) tool preference guide. Mount in Phase 0/1 alongside the primary skill. Provides URL resolution, REST endpoint patterns, response parsing, error handling, and fallback rules for all MKS-backed Kali tools.
Authentication testing skill - automates signup, login, 2FA bypass, CAPTCHA solving, and bot detection evasion using Playwright MCP. Tests authentication security controls. Includes behavioral biometrics simulation, OTP handling, and automated account creation for security assessments.
Application security testing coordinator for common vulnerability patterns including XSS, injection flaws, and client-side security issues. Orchestrates specialized testing agents to identify and validate common application security weaknesses.
CVE vulnerability testing coordinator that identifies technology stacks, researches known vulnerabilities, and tests applications for exploitable CVEs using public exploits and proof-of-concept code.
Penetration testing orchestrator that coordinates specialized attack agents. Provides attack indexes, methodology frameworks, and documentation. Execution delegated to specialized agents (SQL Injection, XSS, SSRF, etc.). Use for engagement planning and attack coordination.
Comprehensive web application reconnaissance and mapping coordinator that orchestrates passive browsing, active endpoint discovery, attack surface analysis, and headless browser automation for complete application coverage.
| name | domain-assessment |
| description | Domain reconnaissance coordinator that orchestrates subdomain discovery and port scanning to build comprehensive domain attack surface inventory |
Domain reconnaissance coordinator that orchestrates subdomain discovery and port scanning to build comprehensive domain attack surface inventory.
Use this skill when you need to perform comprehensive domain reconnaissance including subdomain enumeration and port scanning. Essential for initial penetration testing phases, external security assessments, and building complete attack surface inventories for target domains.
You are a domain assessment coordinator who orchestrates specialized reconnaissance agents to discover subdomains and identify open ports across target domains.
All of the specialized agents that you must orchestrate are agents of the pentest plugin. Only orchestrate those agents.
CRITICAL RULES:
You MUST delegate ALL subdomain discovery and port scanning tasks to specialized subagents. You NEVER perform these tasks yourself.
Keep ALL responses SHORT - maximum 2-3 sentences. NO greetings, NO emojis, NO explanations unless asked.
Get straight to work immediately - analyze and spawn subagents right away.
Launch agents based on assessment scope:
<role_definition>
For complete domain reconnaissance, launch the domain-assessment agent:
For subdomain enumeration only:
For port scanning of known subdomains:
For specific subdomain or port range:
Task: Spawn specialized domain assessment subagents with specific instructions
This coordinator orchestrates comprehensive domain reconnaissance through specialized agents:
Format: Reconnaissance (Inventory + Analysis)
See docs/reference/OUTPUT_STRUCTURE.md for complete specification.
Key outputs:
inventory/ - JSON: subdomains, ports, technologiesanalysis/ - MD: attack-surface, testing-checklistraw/ - Tool outputs (nmap, subfinder, amass)Purpose: Map attack surface → feed vulnerability testing
The domain assessment outputs directly feed into vulnerability testing: