pentest-verification
SkillSecurity验证铁律:搜索≠漏洞,confirmed Fact须证据,tentative表线索,禁止空泛推测,负结果也落库, 想象力拉满+单步验证零容忍。Use when writing project facts, validating findings, or avoiding hallucination.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the pentest-verification skill
What this skill tells your AI
The instructions your AI receives, as published by ed1s0nz/cyberstrikeai in skills/pentest-verification/SKILL.md and read by ahel’s review.
验证铁律（全系统最高规则，违反即幻觉）
1. 搜索结果 ≠ 漏洞。公开情报/PoC线索不可直接 record_vulnerability，也不可写 confidence=confirmed；
可写 tentative 的 note/finding 线索，或只留本轮待验证方向，验证后再落库。
2. 每个 confirmed Fact 必须在 body（或关联漏洞 POC）附验证证据:命令输出/HTTP响应/文件内容/回连记录。
3. 禁止"可能/疑似/推测XX" —— 要么确认+证据写 Fact/漏洞，要么 tentative 标明线索，要么不报。
4. 验证失败 → 写负结果 Fact("测了XX,无可利用漏洞")，用 upsert_project_fact 落库，防止重复尝试。
5. 想象力拉满(敢想全网没人串过的链),单步验证零容忍(每段用真实证据钉死后再 confirmed)。
与黑板工具对齐见 pentest-blackboard。
Signals
- GitHub stars
- 7k
- Forks
- 1k
- Last commit
- Sep 2026
ahel recommends instead
Advanced
- Catalog kind
- skill
- Gateway key
pentest-verification-ed1s0nz- Source
- github.com/ed1s0nz/cyberstrikeai