hack

Route vulnerability testing tasks to security categories based on reconnaissance context.

5|1|Updated Apr 20, 2026
One-click install
npx skills add https://github.com/Yliken/ai4 --skill hack-yliken
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hack
Source: https://github.com/Yliken/ai4/tree/main/skills/hack
Command: npx skills add https://github.com/Yliken/ai4 --skill hack-yliken

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a structured routing hub for security testing tasks, aligning investigators with the most relevant skill category and guiding safe, authorized workflow decisions.

Core Features & Use Cases

  • Recon and context establishment to identify target type, auth model, and scope.
  • Route to the appropriate vulnerability category (e.g., XSS, SQLi, SSRF, IDOR, JWT) to apply a consistent methodology and guardrails.
  • Offer a recommended sequence of skills for bug bounty or security testing engagements, enabling rapid planning and execution.

Quick Start

Begin with a Recon pass to establish target context, then route to the most relevant security category based on observed signals.

Frequently Asked Questions about hack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I plan a bug bounty engagement and route web security testing tasks?

To plan a bug bounty engagement, route web security testing tasks by first establishing target context through reconnaissance. This identifies the target type and auth model, guiding the Agent to the appropriate vulnerability category like XSS, SQLi, or SSRF for structured execution.

What is the best way to structure reconnaissance before testing for API security vulnerabilities?

The best way to structure reconnaissance for API security vulnerabilities is to establish target context and identify the authorization model. This initial recon pass routes the investigation to the correct category strategy, ensuring consistent methodology and authorized testing.

Does this web security testing router support privilege escalation and vulnerability chaining paths?

Yes, this web security testing router supports privilege escalation and vulnerability chaining paths. It guides the Agent through Recon, Validation, Privilege Escalation, and chaining sequences to ensure comprehensive vulnerability triage and structured bug bounty execution.

Can I use this router for testing authorization flaws like IDOR and JWT vulnerabilities?

Yes, you can use this router for testing authorization flaws like IDOR and JWT vulnerabilities. It applies to web application testing and API security, routing observed signals to the most relevant security category to apply consistent methodology.

What guardrails are in place to ensure authorized and lawful security testing?

Guardrails are in place to ensure authorized and lawful security testing by enforcing a structured entry point with an operating model and documented guidance. This workflow satisfies requirements for safe testing decisions during vulnerability triage.