What problem does it solve?
Penetration testing engagements often produce inconsistent reports, untracked system changes, and lost negative results, making audits and rollbacks difficult. This Skill enforces a uniform output standard so every finding, modification, and dead-end is documented in a consistent, auditable format.
Core Features & Use Cases
- Structured Vulnerability Reports: Generates reports with severity, affected versions, exploitation steps, verified evidence, impact, and remediation advice, synchronized with record_vulnerability calls.
- Change Ledger Tracking: Maintains a real-time ledger of every write-type change (webshells, new accounts, config edits, persistence, credential requests) with rollback commands and a one-click reverse-order rollback script.
- Negative Result & Deadlock Handling: Records failed test methods with exclusion reasons as Facts to avoid repeated attempts, and triggers a deadlock-breaking procedure when progress stalls.
- Use Case: During an authorized red-team engagement, the agent documents each verified vulnerability in Chinese with evidence, logs every system modification with rollback commands, and delivers a complete change ledger plus rollback script at handover.
Quick Start
Ask the agent to follow the pentest output standards when reporting findings and tracking all system changes during this authorized penetration test.
