What problem does it solve? Agents working over a red-team engagement memory store can waste context loading an entire SQLite world model or full vault when they only need one host, credential, or action. This Skill provides a targeted query workflow over the folder-based Markdown/Obsidian vault produced by agent-baseline export-obsidian, so agents read only the files they need. ## Core Features & Use Cases - Targeted search-first workflow: Use rg, fd, and find to locate hosts, services, credentials, and action records by IP, hostname, port, username, or action id before opening any file. - Structured vault layout: Per-host folders expose index.md, services.md, creds.md, actions.md, reached-by.md, and raw.md, plus cross-host credential and chronological action indexes. - Pivot and replay reasoning: Read reached-by.md before pivoting and actions.md to avoid repeating failed attempts; open raw.md only when summaries are ambiguous. - Use Case: An agent needs to know which credentials are valid against host 10.0.0.5 before pivoting. It runs rg "Status: valid" over the vault, reads that host's creds.md and reached-by.md, and plans the next move without loading the full database. ## Quick Start Ask the agent to search the exported vault for a specific host IP and summarize its services, valid credentials, and how it was reached.
