[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71KCEYNAZXMJDF0TV1S2CFF":3,"skill-same:01M71KCEYNAZXMJDF0TV1S2CFF":139},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":26,"publishedAt":47,"linkOnly":48,"markdownContent":49,"markdownBody":50,"frontMatter":51,"refName":54,"commitSha":55,"skillDirectory":56,"forksCount":57,"repositoryHtmlUrl":58,"repositoryHomepageUrl":59,"ownerHtmlUrl":60,"ownerBlogUrl":61,"ownerDescription":62,"updatedAt":63,"install":64,"resources":76},"01M71KCEYNAZXMJDF0TV1S2CFF","pentest-tools",null,"主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。\n通过 MCP server（pentestMCP \u002F mcp-security-hub）将 20+ 安全工具暴露给 AI agent。\n触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。","coco-research\u002Fcoco","coco-research","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F68911604?v=4","01M71JRE9C4NM4NSZM4JD0BJTB","Coco Research","01M71JREA0ZMR0PMH3CKA99SN1",630,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46],"pentest tools","pentest","Tools","密码","渗透测试","true","工具","hub","MCP-security","关键词","安全","testing","security-hub","Nmap","server","sql","web","ai agent","mcp server","MCP","2026-11-10 10:12:30",false,"---\nname: pentest-tools\ndescription: |\n  主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。\n  通过 MCP server（pentestMCP \u002F mcp-security-hub）将 20+ 安全工具暴露给 AI agent。\n  触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。\nuser-invocable: true\n---\n\n# 渗透测试工具链 (Pentest Tools)\n\n## 适用范围\n\n当任务属于以下场景时使用本 skill：\n\n- 目标信息收集（端口扫描、子域名枚举、服务识别）\n- 漏洞扫描（Web 漏洞、CVE 检测、配置错误）\n- Web 渗透（SQL 注入、XSS、SSRF、目录爆破）\n- 密码破解（哈希破解、字典攻击）\n- 网络渗透（服务利用、横向移动辅助）\n\n### 与其他 skill 的分工\n\n| 场景 | 用什么 |\n|------|--------|\n| 主动扫描\u002F攻击（Nmap\u002FNuclei\u002FSQLMap） | **本 skill** |\n| 逆向分析二进制 | `ida-reverse\u002F` 或 `radare2\u002F` |\n| 前端 JS 签名逆向 | `js-reverse\u002F` |\n| 浏览器\u002F桌面自动化操作 | `browser-automation\u002F` |\n| CTF 竞赛（综合） | `CTF-Sandbox-Orchestrator\u002F` |\n\n简单判断：\n- 需要\"扫描目标、发现漏洞、利用漏洞\" → 本 skill\n- 需要\"分析程序内部逻辑\" → 逆向类 skill\n- 需要\"操作浏览器\u002F桌面\" → browser-automation\n\n---\n\n## 工具矩阵\n\n### 信息收集\n\n| 工具 | 用途 | 典型命令 |\n|------|------|---------|\n| **Nmap** | 端口扫描、服务识别、OS 检测 | `nmap -sV -sC -O target` |\n| **Masscan** | 大规模快速端口扫描 | `masscan -p1-65535 target --rate=1000` |\n| **Subfinder** | 子域名枚举 | `subfinder -d target.com` |\n| **httpx** | HTTP 探测、存活检测 | `httpx -l urls.txt -status-code` |\n\n### 漏洞扫描\n\n| 工具 | 用途 | 典型命令 |\n|------|------|---------|\n| **Nuclei** | 模板化漏洞扫描（CVE\u002F配置\u002F暴露） | `nuclei -u target -t cves\u002F` |\n| **ZAP** | Web 应用安全扫描 | 通过 API 或 MCP 调用 |\n| **Nikto** | Web 服务器漏洞扫描 | `nikto -h target` |\n\n### Web 渗透\n\n| 工具 | 用途 | 典型命令 |\n|------|------|---------|\n| **SQLMap** | SQL 注入自动化 | `sqlmap -u \"url?id=1\" --batch --dbs` |\n| **FFUF** | 目录\u002F参数爆破 | `ffuf -u target\u002FFUZZ -w wordlist.txt` |\n| **Gobuster** | 目录\u002F子域名爆破 | `gobuster dir -u target -w wordlist` |\n| **XSStrike** | XSS 检测 | `xsstrike -u \"url?param=test\"` |\n\n### 密码破解\n\n| 工具 | 用途 | 典型命令 |\n|------|------|---------|\n| **Hashcat** | GPU 哈希破解 | `hashcat -m 0 hash.txt wordlist.txt` |\n| **John the Ripper** | CPU 哈希破解 | `john --wordlist=rockyou.txt hash.txt` |\n| **Hydra** | 在线暴力破解 | `hydra -l admin -P pass.txt target ssh` |\n\n### 利用框架\n\n| 工具 | 用途 | 说明 |\n|------|------|------|\n| **Metasploit** | 漏洞利用框架 | 需要单独安装，体量大 |\n| **Impacket** | Windows 协议利用（SMB\u002FWMI\u002FKerberos） | `pip install impacket` |\n\n---\n\n## 工作流\n\n### 标准渗透流程\n\n> **重要**：执行渗透测试时，必须按 `references\u002Fpentest-loop.md` 的自主循环框架运行。\n> 该框架定义了完整的风险门控、记录规范、上下文压缩和完成检查机制。\n\n```text\n1. 信息收集\n   - Nmap 端口扫描 → 确认开放服务\n   - Subfinder 子域名枚举 → 扩大攻击面\n   - httpx 存活检测 → 过滤有效目标\n\n2. 漏洞扫描\n   - Nuclei 模板扫描 → 快速发现已知漏洞\n   - ZAP\u002FNikto → Web 应用深度扫描\n\n3. 漏洞利用\n   - SQLMap → SQL 注入\n   - FFUF → 发现隐藏路径\u002F参数\n   - 手动验证 → 确认可利用性\n\n4. 后渗透（如果授权范围内）\n   - 权限提升\n   - 横向移动\n   - 数据提取\n\n5. 报告\n   - 调用 docs-generator skill 生成渗透测试报告\n```\n\n### 快速扫描流程（5 分钟出结果）\n\n```text\n1. nmap -sV -sC target → 端口+服务\n2. nuclei -u target -severity critical,high → 高危漏洞\n3. 有 Web 服务 → ffuf -u target\u002FFUZZ -w common.txt → 目录\n4. 汇总发现 → 决定下一步\n```\n\n---\n\n## 注意事项\n\n- **必须有授权** — 所有扫描\u002F攻击操作必须在授权范围内\n- **控制扫描速率** — 避免触发 WAF\u002FIDS 或打崩目标\n- **先被动后主动** — 先信息收集，再漏洞扫描，最后利用\n- **记录所有操作** — 每个命令和结果都要记录，用于报告\n- **不要盲目自动化** — AI 应该在每个关键步骤等待确认\n\n---\n\n## 参考资源\n\n- [awesome-pentest](https:\u002F\u002Fgithub.com\u002Fenaqx\u002Fawesome-pentest) — 25k+ stars 渗透工具大全\n- [SecLists](https:\u002F\u002Fgithub.com\u002Fdanielmiessler\u002FSecLists) — 字典\u002Fpayload 集合（FFUF\u002FGobuster 必备）\n- [PayloadsAllTheThings](https:\u002F\u002Fgithub.com\u002Fswisskyrepo\u002FPayloadsAllTheThings) — 各类漏洞 payload\n- [HackTricks](https:\u002F\u002Fbook.hacktricks.wiki\u002F) — 渗透技巧百科\n- [pentest-ai-agents](https:\u002F\u002Fgithub.com\u002F0xSteph\u002Fpentest-ai-agents) — 35 个 Claude Code 渗透子 agent（参考其 prompt 模式）\n- [Pentest Swarm AI](https:\u002F\u002Fgithub.com\u002FArmur-Ai\u002FPentest-Swarm-AI) — 群体智能自主渗透框架（多 agent 协同，支持 MCP server）\n- [ProxyCat](https:\u002F\u002Fgithub.com\u002Fhonmashironeko\u002FProxyCat) — 代理池中间件（批量扫描防封 IP）\n- [planning-with-files](https:\u002F\u002Fgithub.com\u002Fothmanadi\u002Fplanning-with-files) — 计划任务 skill（循环测试用）\n\n### 本 skill 内参考文档\n\n- `references\u002Fpentest-loop.md` — **核心循环框架**（风险门控 + 记录规范 + 上下文压缩）\n- `references\u002Frecon-pipeline.md` — **授权侦察流水线**（CF 头 \u002F nmap \u002F Evidence）\n- `references\u002Fclient-side-lab-playbook.md` — **DOM XSS \u002F 原型污染 \u002F agent-browser**（靶场客户端面）\n- `references\u002Fburpsuite-mcp-guide.md` — **BurpSuite MCP 完整指南**（63 工具 + 7 大使用场景 + AI Prompt 模板）\n- `references\u002Fautomation-loop-pattern.md` — 自动化循环测试模式（轻量版）\n- `references\u002Fawesome-pentest-digest.md` — 渗透工具精华速查\n- `references\u002Fpentest-ai-agents-matrix.md` — 35 agent 覆盖矩阵\n- `payloads\u002F` — 自定义 payload 目录（AI 优先使用）\n- `templates\u002F` — 渗透测试必需文件模板（scope\u002Frules\u002Fplan\u002Ffindings\u002Fprogress）\n\n---\n","# 渗透测试工具链 (Pentest Tools)\n\n## 适用范围\n\n当任务属于以下场景时使用本 skill：\n\n- 目标信息收集（端口扫描、子域名枚举、服务识别）\n- 漏洞扫描（Web 漏洞、CVE 检测、配置错误）\n- Web 渗透（SQL 注入、XSS、SSRF、目录爆破）\n- 密码破解（哈希破解、字典攻击）\n- 网络渗透（服务利用、横向移动辅助）\n\n### 与其他 skill 的分工\n\n| 场景 | 用什么 |\n|------|--------|\n| 主动扫描\u002F攻击（Nmap\u002FNuclei\u002FSQLMap） | **本 skill** |\n| 逆向分析二进制 | `ida-reverse\u002F` 或 `radare2\u002F` |\n| 前端 JS 签名逆向 | `js-reverse\u002F` |\n| 浏览器\u002F桌面自动化操作 | `browser-automation\u002F` |\n| CTF 竞赛（综合） | `CTF-Sandbox-Orchestrator\u002F` |\n\n简单判断：\n- 需要\"扫描目标、发现漏洞、利用漏洞\" → 本 skill\n- 需要\"分析程序内部逻辑\" → 逆向类 skill\n- 需要\"操作浏览器\u002F桌面\" → browser-automation\n\n---\n\n## 工具矩阵\n\n### 信息收集\n\n| 工具 | 用途 | 典型命令 |\n|------|------|---------|\n| **Nmap** | 端口扫描、服务识别、OS 检测 | `nmap -sV -sC -O target` |\n| **Masscan** | 大规模快速端口扫描 | `masscan -p1-65535 target --rate=1000` |\n| **Subfinder** | 子域名枚举 | `subfinder -d target.com` |\n| **httpx** | HTTP 探测、存活检测 | `httpx -l urls.txt -status-code` |\n\n### 漏洞扫描\n\n| 工具 | 用途 | 典型命令 |\n|------|------|---------|\n| **Nuclei** | 模板化漏洞扫描（CVE\u002F配置\u002F暴露） | `nuclei -u target -t cves\u002F` |\n| **ZAP** | Web 应用安全扫描 | 通过 API 或 MCP 调用 |\n| **Nikto** | Web 服务器漏洞扫描 | `nikto -h target` |\n\n### Web 渗透\n\n| 工具 | 用途 | 典型命令 |\n|------|------|---------|\n| **SQLMap** | SQL 注入自动化 | `sqlmap -u \"url?id=1\" --batch --dbs` |\n| **FFUF** | 目录\u002F参数爆破 | `ffuf -u target\u002FFUZZ -w wordlist.txt` |\n| **Gobuster** | 目录\u002F子域名爆破 | `gobuster dir -u target -w wordlist` |\n| **XSStrike** | XSS 检测 | `xsstrike -u \"url?param=test\"` |\n\n### 密码破解\n\n| 工具 | 用途 | 典型命令 |\n|------|------|---------|\n| **Hashcat** | GPU 哈希破解 | `hashcat -m 0 hash.txt wordlist.txt` |\n| **John the Ripper** | CPU 哈希破解 | `john --wordlist=rockyou.txt hash.txt` |\n| **Hydra** | 在线暴力破解 | `hydra -l admin -P pass.txt target ssh` |\n\n### 利用框架\n\n| 工具 | 用途 | 说明 |\n|------|------|------|\n| **Metasploit** | 漏洞利用框架 | 需要单独安装，体量大 |\n| **Impacket** | Windows 协议利用（SMB\u002FWMI\u002FKerberos） | `pip install impacket` |\n\n---\n\n## 工作流\n\n### 标准渗透流程\n\n> **重要**：执行渗透测试时，必须按 `references\u002Fpentest-loop.md` 的自主循环框架运行。\n> 该框架定义了完整的风险门控、记录规范、上下文压缩和完成检查机制。\n\n```text\n1. 信息收集\n   - Nmap 端口扫描 → 确认开放服务\n   - Subfinder 子域名枚举 → 扩大攻击面\n   - httpx 存活检测 → 过滤有效目标\n\n2. 漏洞扫描\n   - Nuclei 模板扫描 → 快速发现已知漏洞\n   - ZAP\u002FNikto → Web 应用深度扫描\n\n3. 漏洞利用\n   - SQLMap → SQL 注入\n   - FFUF → 发现隐藏路径\u002F参数\n   - 手动验证 → 确认可利用性\n\n4. 后渗透（如果授权范围内）\n   - 权限提升\n   - 横向移动\n   - 数据提取\n\n5. 报告\n   - 调用 docs-generator skill 生成渗透测试报告\n```\n\n### 快速扫描流程（5 分钟出结果）\n\n```text\n1. nmap -sV -sC target → 端口+服务\n2. nuclei -u target -severity critical,high → 高危漏洞\n3. 有 Web 服务 → ffuf -u target\u002FFUZZ -w common.txt → 目录\n4. 汇总发现 → 决定下一步\n```\n\n---\n\n## 注意事项\n\n- **必须有授权** — 所有扫描\u002F攻击操作必须在授权范围内\n- **控制扫描速率** — 避免触发 WAF\u002FIDS 或打崩目标\n- **先被动后主动** — 先信息收集，再漏洞扫描，最后利用\n- **记录所有操作** — 每个命令和结果都要记录，用于报告\n- **不要盲目自动化** — AI 应该在每个关键步骤等待确认\n\n---\n\n## 参考资源\n\n- [awesome-pentest](https:\u002F\u002Fgithub.com\u002Fenaqx\u002Fawesome-pentest) — 25k+ stars 渗透工具大全\n- [SecLists](https:\u002F\u002Fgithub.com\u002Fdanielmiessler\u002FSecLists) — 字典\u002Fpayload 集合（FFUF\u002FGobuster 必备）\n- [PayloadsAllTheThings](https:\u002F\u002Fgithub.com\u002Fswisskyrepo\u002FPayloadsAllTheThings) — 各类漏洞 payload\n- [HackTricks](https:\u002F\u002Fbook.hacktricks.wiki\u002F) — 渗透技巧百科\n- [pentest-ai-agents](https:\u002F\u002Fgithub.com\u002F0xSteph\u002Fpentest-ai-agents) — 35 个 Claude Code 渗透子 agent（参考其 prompt 模式）\n- [Pentest Swarm AI](https:\u002F\u002Fgithub.com\u002FArmur-Ai\u002FPentest-Swarm-AI) — 群体智能自主渗透框架（多 agent 协同，支持 MCP server）\n- [ProxyCat](https:\u002F\u002Fgithub.com\u002Fhonmashironeko\u002FProxyCat) — 代理池中间件（批量扫描防封 IP）\n- [planning-with-files](https:\u002F\u002Fgithub.com\u002Fothmanadi\u002Fplanning-with-files) — 计划任务 skill（循环测试用）\n\n### 本 skill 内参考文档\n\n- `references\u002Fpentest-loop.md` — **核心循环框架**（风险门控 + 记录规范 + 上下文压缩）\n- `references\u002Frecon-pipeline.md` — **授权侦察流水线**（CF 头 \u002F nmap \u002F Evidence）\n- `references\u002Fclient-side-lab-playbook.md` — **DOM XSS \u002F 原型污染 \u002F agent-browser**（靶场客户端面）\n- `references\u002Fburpsuite-mcp-guide.md` — **BurpSuite MCP 完整指南**（63 工具 + 7 大使用场景 + AI Prompt 模板）\n- `references\u002Fautomation-loop-pattern.md` — 自动化循环测试模式（轻量版）\n- `references\u002Fawesome-pentest-digest.md` — 渗透工具精华速查\n- `references\u002Fpentest-ai-agents-matrix.md` — 35 agent 覆盖矩阵\n- `payloads\u002F` — 自定义 payload 目录（AI 优先使用）\n- `templates\u002F` — 渗透测试必需文件模板（scope\u002Frules\u002Fplan\u002Ffindings\u002Fprogress）\n\n---\n",{"name":5,"description":52,"user-invocable":53},"主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。\n通过 MCP server（pentestMCP \u002F mcp-security-hub）将 20+ 安全工具暴露给 AI agent。\n触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。\n",true,"main","cd89f013b617f7eea982a9bbc60e992974fda2aa","systems\u002Freverse-skill\u002Fskills\u002Fpentest-tools",15,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco","https:\u002F\u002Fcocoresearch.org\u002Fcoco\u002F","https:\u002F\u002Fgithub.com\u002Fcoco-research","https:\u002F\u002Fcocoresearch.org","Local-first, open-source tools for people who work with AI agents: governed memory, agents that check their own work, and data that stays on your machine.","2026-11-11 12:18:13",{"source":8,"skillName":5,"commands":65,"prompt":75,"zipAvailable":53},[66,69,72],{"tool":67,"command":68},"npx","npx skills add coco-research\u002Fcoco --skill pentest-tools",{"tool":70,"command":71},"bunx","bunx skills add coco-research\u002Fcoco --skill pentest-tools",{"tool":73,"command":74},"pnpm","pnpm dlx skills add coco-research\u002Fcoco --skill pentest-tools","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002FSKILL.md",[77,83,87,91,95,99,103,107,111,115,119,123,127,131,135],{"path":78,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":81,"sourceHtmlUrl":82},"references\u002Fai-pentest-agents.md","REFERENCE","参考文档",6171,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fai-pentest-agents.md",{"path":84,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Fai-pentesting-landscape-2026.md",3503,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fai-pentesting-landscape-2026.md",{"path":88,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":89,"sourceHtmlUrl":90},"references\u002Fautomation-loop-pattern.md",5346,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fautomation-loop-pattern.md",{"path":92,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":93,"sourceHtmlUrl":94},"references\u002Fawesome-pentest-digest.md",6090,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fawesome-pentest-digest.md",{"path":96,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":97,"sourceHtmlUrl":98},"references\u002Fburpsuite-mcp-guide.md",23570,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fburpsuite-mcp-guide.md",{"path":100,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":101,"sourceHtmlUrl":102},"references\u002Fkali-mcp-ecosystem.md",4527,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fkali-mcp-ecosystem.md",{"path":104,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":105,"sourceHtmlUrl":106},"references\u002Fnuclei-guide-2026.md",4070,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fnuclei-guide-2026.md",{"path":108,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":109,"sourceHtmlUrl":110},"references\u002Fpentest-ai-agents-matrix.md",5074,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fpentest-ai-agents-matrix.md",{"path":112,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":113,"sourceHtmlUrl":114},"references\u002Fpentest-loop.md",6719,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Fpentest-loop.md",{"path":116,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":117,"sourceHtmlUrl":118},"references\u002Frecon-pipeline.md",5793,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Freferences\u002Frecon-pipeline.md",{"path":120,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":121,"sourceHtmlUrl":122},"templates\u002Ffindings.md",328,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Ftemplates\u002Ffindings.md",{"path":124,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":125,"sourceHtmlUrl":126},"templates\u002Fprogress.md",242,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Ftemplates\u002Fprogress.md",{"path":128,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":129,"sourceHtmlUrl":130},"templates\u002Frules.md",722,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Ftemplates\u002Frules.md",{"path":132,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":133,"sourceHtmlUrl":134},"templates\u002Fscope.md",422,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Ftemplates\u002Fscope.md",{"path":136,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":137,"sourceHtmlUrl":138},"templates\u002Ftask_plan.md",543,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fpentest-tools\u002Ftemplates\u002Ftask_plan.md",[140,165,175,193,228,247],{"skillNo":141,"name":142,"nameZh":6,"description":143,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":144,"categories":145,"keywords":147,"publishedAt":47},"01M71KEJXF9KMT0BWCMRSRFA4M","trading-super-intelligence","Trading Super Intelligence Team. Named real-world personas across 8 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Ftrading\u002FSKILL.md",[146],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164],"super","trading super intelligence","intelligence","trading","validator","personas","local","composites","studio","team","across","world","first","gated","2026","lm studio","local-first",{"skillNo":166,"name":167,"nameZh":6,"description":168,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":169,"categories":170,"keywords":172,"publishedAt":47},"01M71KEFWS3CMAP7DF1P0FWTDE","strategy-super-intelligence","Strategy Super Intelligence Team. Named real-world personas across 7 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fstrategy\u002FSKILL.md",[171],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[173,148,174,150,152,153,154,155,156,157,158,159,160,161,162,163,164],"strategy","strategy super intelligence",{"skillNo":176,"name":177,"nameZh":6,"description":178,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":179,"categories":180,"keywords":187,"publishedAt":47},"01M71KED56ZEPK2QE84QSQPMT0","risk-compliance-super-intelligence","Risk & Compliance (GRC) Super Intelligence Team. Named real-world personas across 7 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Frisk-compliance\u002FSKILL.md",[181,182],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":183,"categoryName":184,"taxonomyType":185,"taxonomyTypeDesc":186},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[188,148,189,190,191,150,152,153,154,155,192,156,157,158,159,160,161,162,163,164],"risk","risk compliance super intelligence","compliance","risk compliance","grc",{"skillNo":194,"name":195,"nameZh":6,"description":196,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":197,"categories":198,"keywords":212,"publishedAt":47},"01M71KE9A2FWSC74VA96W1EZSN","product-design-super-intelligence","Your product + design brain trust and decision partner. Named personas across 8 cells spanning product strategy, discovery\u002Fresearch, growth\u002Fmetrics, design foundations\u002Fusability, design leadership\u002Fcraft, UX\u002Fcontent, design systems, and a…","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fproduct-design\u002FSKILL.md",[199,202,205,206,209],{"categoryNo":200,"categoryName":201,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":203,"categoryName":204,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":207,"categoryName":208,"taxonomyType":185,"taxonomyTypeDesc":186},"01JBSEEDCAT000000000000031","产品经理",{"categoryNo":210,"categoryName":211,"taxonomyType":185,"taxonomyTypeDesc":186},"01JBSEEDCAT000000000000032","设计师",[213,214,150,215,148,216,217,218,219,220,221,157,158,222,223,162,224,225,226,227],"design","product","product design","product design super intelligence","foundations","product-design","decision","design systems","usability","leadership","ux","brain","craft","metrics","trust",{"skillNo":229,"name":230,"nameZh":6,"description":231,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":232,"categories":233,"keywords":236,"publishedAt":47},"01M71KE6H9FPSD9TECYFBPXZ8Y","legal-ip-super-intelligence","Your legal, IP, and regulatory brain trust. 31 named personas across 7 cells covering patent strategy, tech licensing, regulatory litigation, AI governance, open-source compliance, privacy law, and antitrust.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Flegal-ip\u002FSKILL.md",[234,235],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":183,"categoryName":184,"taxonomyType":185,"taxonomyTypeDesc":186},[237,148,238,150,239,240,227,241,153,242,243,244,173,157,158,245,190,246,162,224],"ip","legal ip super intelligence","legal","sep","tech","litigation","ai governance","open","open-source","governance",{"skillNo":248,"name":249,"nameZh":6,"description":250,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":251,"categories":252,"keywords":254,"publishedAt":47},"01M71KE36QRY610V6YVB9JWRND","healthcare-life-sciences-super-intelligence","Your healthcare and life sciences brain trust. 25 named personas across 7 cells covering drug discovery, medtech, biotech strategy, health policy, genomics, clinical trials, and healthcare economics.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fhealthcare-life-sciences\u002FSKILL.md",[253],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[255,148,256,257,150,240,227,258,259,153,260,261,173,157,158,262,263,264,265,162],"healthcare","healthcare life sciences super intelligence","life","economics","discovery","policy","clinical","clinical trials","health","trials","genomics"]