scaffolding-ctf-engagement

What problem does it solve?

This Skill turns an authorized offensive-security engagement into a clear pre-flight packet so testing starts only after scope, authorization, and reporting rules are fixed.

Core Features & Use Cases

• Builds a Rules of Engagement, in-scope and out-of-scope inventory, severity rubric, finding template, and proof-of-concept hygiene rules.
• Handles paid pentests, internal CTF rotations, and bug-bounty workflows with different authorization sources and reporting formats.
• Prevents common mistakes such as inferred wildcard scope, unsigned authorization, real-data exfiltration, and proof artifacts that persist beyond the engagement.

Quick Start

Ask for an engagement scaffold by providing the engagement type, exact scope, authorizer, time window, team size, deliverable format, and severity model.