Ed1s0nZEd1s0nZ/CyberStrikeAI/skills/pentest-output-standards/SKILL.md

pentest-output-standards

Skill8.5k starsChanged 9 days agoApache-2.0View on GitHub

输出规范:中文分析,思维链,漏洞报告模板,负结果,黑板状态总览,改动台账,死锁突破。 Use when reporting findings, maintaining change ledger, or formatting pentest output.

2 other projects use a version of this.

Apr 11, 2026General Information Regarding the Addition of New Features — six2dez/burp-ai-agent3 reactions · 2 comments
Jun 15, 2026feat: 接入CyberStrikeAI — zhongruan0522/Cloud-Development0 reactions
May 26, 2026Add: Ed1s0nZ/CyberStrikeAI — paranoailabs/ai-security-tools0 reactions
Mar 9, 2026📈 Bản tin xu hướng AI mã nguồn mở 2026-03-09 — compasify/agents-radar0 reactions
Dec 19, 2025[项目申请]: CyberStrikeAI — knownsec/404StarLink0 reactions · 1 comment

1 more on GitHub

Dec 11, 2025[项目申请]: CyberStrikeAI — knownsec/404StarLink0 reactions · 1 comment

On Bluesky · 2

Mar 8, 2026今日のGitHubトレンド Ed1s0nZ/CyberStrikeAI CyberStrikeAIは、Go言語で構築されたAIを活用したセキュリティテストプラットフォームです。… — @dailygithubtrends.bsky.social1 likes and repost
Feb 7, 2026Day 10 of useful #GitHub projects: CyberStrikeAI is an AI-native security testing platform built in Go github.com/Ed1s0nZ/Cybe... #devops… — @hugovalters.bsky.socialsays it tested it1 likes and repost

On Hacker News · 1

Mar 8, 2026AI Powered Exploit Kit1 point

Other versions2 projects use a version of this.
Word for word · 2
AIPentest/CyberStrikeAI★ 8.5k100% same
Kxiandaoyan/CyberStrikeAI★ 19100% same
Edited · 0
None found.
Wrote their own version · 0
None found.
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository22 other files it gives its agents.
- active-directory-attackSkill
- ai-llm-app-attackSkill
- attack-surface-reconSkill
- binary-mobile-reversingSkill
- blockchain-contract-attackSkill
- capability-primitive-searchSkill
- cloud-attack-methodsSkill
- component-vuln-intelSkill
- cyberstrike-eino-demoSkill
- initial-access-phishingSkill
- pentest-agent-osSkill
- pentest-blackboardSkill
- pentest-verificationSkill
- post-exploitationSkill
- proxy-tool-bootstrapSkill
- redteam-opsecSkill
- source-code-huntingSkill
- specialized-attack-playbooksSkill
- unlimited-attack-scopeSkill
- web-attack-methodsSkill
- wireless-hardware-attackSkill
- zero-day-discoverySkill

The file

Create a free account to mount

Files

SKILL.md

输出规范

语言: 所有分析/推理/报告用中文,工具命令和代码用英文,CVE编号保留英文。
每步思维链: 当前模式(单代理/deep/plan_execute/supervisor) + 已读黑板要点 + 决策推理 + 执行 + 结果摘要
  + 是否已 upsert_project_fact / record_vulnerability。
漏洞报告(每个已验证 Fact/可交付项): 漏洞名+严重程度+影响版本+利用条件+利用步骤(请求/响应)+验证证据(✓实际输出)+影响+修复建议。
  → 同步 record_vulnerability；复现上下文另 upsert finding/chain/exploit/poc Fact。
负结果: 测试方法+结果+排除原因 → upsert 负结果 Fact，避免重复打点。
图状态总览(每轮结束): list/search_project_facts 摘要 + 当前进度 + 下一步；勿臆造未 get 的 body。
🚨改动台账(每处写入型改动实时记账,清不清交用户): #|时间|主机|类型|位置|内容|回滚命令
  类型:webshell/新建账户/改配置/持久化/权限改动(DCSync/RBCD/影子凭据)/申请凭据/数据库改动/网络改动
  改配置前先备份.bak把路径写进台账 | 交付输出完整台账+一键回滚脚本(逆序生成),系统绝不擅自清理。
  可选: note/change-* Fact 固化台账条目。
死锁突破(连续多轮负结果且无新攻击面): 强制 list/search_project_facts 重审 → 换域/深度狩猎 → 向用户请求澄清或授权边界。

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

It worked
Partly
It didn't

What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free

pentest-output-standards

Trending

Most recently taken up by

Who's talking about Ed1s0nZ/CyberStrikeAI

On GitHub · 6