guaidao2Community·13 Agent Skills Included

XuanMu-RedTeam-Agent

Coordinated red-team testing, code audit, and reverse engineering

Coordinates a lead planner and five security specialists to run authorized penetration tests, code audits, OSINT recon, binary reverse engineering, and cryptography review. Eliminates scattered notes and lost findings by recording assets, evidence, and attack paths in a shared reasoning graph. Ships ready-made skills for nmap, sqlmap, Ghidra, jadx, and browser control so engagements move faster with full reviewability.

81|14

↗

npx skills add guaidao2/XuanMu-RedTeam-Agent --all -g -y

Available:

Defines the lead coordinator's delegation, coverage, and evidence rules plus each specialist's domain boundaries, retest triggers, and self-review gates for authorized security engagements.

All Skills in This Repository (13)

Pure Emerald Level Indicators

📦 In Repo

guaidao2

dns-whois

Query DNS, WHOIS, ASN, and ownership data using local CLI tools.

sandbox-shell

Execute bounded shell commands with explicit timeouts and captured output.

sqlmap

Detect and validate SQL injection vulnerabilities in authorized web application targets.

observer-ward

Identifies web applications, middleware, and technology fingerprints on authorized HTTP targets via observer_ward CLI.

apktool

Decode Android APK resources, manifests, smali code, and packaging metadata.

httpx

Probe live HTTP and HTTPS hosts and collect response metadata.

agent-browser-cli

Control and inspect supervised Chromium browsers via CLI workflows.

archive-file-triage

Identify, inspect, and extract unknown archives into task-scoped directories.

ghidra

Automate headless analysis and decompilation of executable binaries and firmware.

jadx

Decompile Android APK, DEX, AAR, and JAR bytecode into Java source and decoded resources.

nmap

Discover hosts, ports, services, versions, and NSE script findings with nmap.

openssl

Inspect TLS endpoints and cryptographic artifacts with openssl commands.

Community

Intermediate

Frequently Asked Questions

FAQPage Schema

How to install XuanMu-RedTeam-Agent?▼

Run `npx skills add guaidao2/XuanMu-RedTeam-Agent --all -g -y` in your terminal to install all skills in this suite globally.

What does XuanMu do for penetration testing?▼

It coordinates a lead planner with five specialists covering code audit, recon, live exploitation, reverse engineering, and cryptography. All findings, assets, and attack paths are stored in a shared reasoning graph for full traceability.

Which security tools are included?▼

Pre-built skills cover nmap, sqlmap, httpx, dns-whois, Ghidra headless analysis, jadx, apktool, binwalk, openssl, and a controlled browser for web testing.

Is XuanMu legal to use?▼

It is built strictly for authorized security testing, risk assessment, and research on systems you own or have written permission to test. Unauthorized use against any system is prohibited.

Which models does XuanMu support?▼

It calls any OpenAI-compatible API directly, so it works with DeepSeek, Qwen, GLM, and similar providers configured per agent role.