agentleFS
yxy050208yxy050208/qwen-security-copilot/skills/full-spectrum-lab/SKILL.md

full-spectrum-lab

Skill1 starsChanged 2 months agoMITView on GitHub

为隔离实验室覆盖主要红队场景族,生成可回滚的模拟计划、遥测预期和证据要求,不执行真实高危攻击。

The file

Files
SKILL.md

全面实验室红队

使用 lab_scenario_plan 按场景族编排实验室工作。可覆盖 Web/API、身份访问、云权限、容器平台、网络协议、移动端/二进制、供应链交付和 AI/LLM 应用等边界。

每个场景都必须具备:一次性实验室资源、合成数据、快照和回滚点、单一安全假设、可观察通过条件、蓝队遥测源、最小证据和停止条件。工具只返回计划,始终 execution_allowed=false。

真正的模拟只能通过已审核的实验室适配器执行,并由人工确认目标、时间窗和动作。不要读取或导入外部插件的原始提示词、载荷或隐藏说明;只按黑盒接口和测试结果登记能力。

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.