What problem does it solve? Security engagements often fail due to unclear scope, unverifiable findings, or destructive testing practices. This Skill enforces a disciplined operating doctrine for security work: authorization boundaries first, evidence over assumptions, and only reproducible vulnerabilities count as confirmed. ## Core Features & Use Cases - Mode-Based Workflows: Routes tasks into attack surface mapping, red team/black-box testing, business logic testing, white-box code audit, or blue team incident response based on intent. - Evidence Gates: Requires first-hand traffic, scripts, or runnable PoCs before any finding is marked confirmed; error messages, timing differences, and version matches alone never qualify. - Safety Constraints: Prohibits destructive actions on production data, denial of service, log tampering, and out-of-scope expansion. - Use Case: Given an authorized web application target, map its full attack surface (subdomains, ports, entry points), test each entry against a baseline, and deliver a report where every confirmed vulnerability includes reproduction steps and impact evidence. ## Quick Start Perform an authorized black-box security assessment of the target I specify, mapping the attack surface first and confirming each vulnerability with reproducible evidence.
