Habilidades pentest-coordinator
📦

pentest-coordinator

Revisión del contenido r1 Crítico ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos

Coordinar Pruebas de Penetración de Laboratorio Autorizadas

Los laboratorios de pruebas de penetración requieren un seguimiento cuidadoso del estado en las fases de reconocimiento, explotación y escalada de privilegios. Esta skill coordina un flujo de trabajo de laboratorio autorizado con notas estructuradas, intentos y criterios de finalización.

Compatible con: Claude Codex Code(CC)
⚠️ 38 Deficiente

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "pentest-coordinator" from https://skillstore.io/skills/charleskozel-pentest-coordinator.md and its manifest at https://skillstore.io/api/skills/charleskozel-pentest-coordinator/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/charleskozel-pentest-coordinator.md Manifest firmado GET /api/skills/charleskozel-pentest-coordinator/manifest Lockfile firmado GET /api/skills/charleskozel-pentest-coordinator/lockfile

Pruébalo

Usando "pentest-coordinator". Iniciar una prueba de laboratorio delimitada para un objetivo de formación proporcionado.

Resultado esperado:

La skill crea un plan de fases, registra el alcance del objetivo, enumera los objetivos iniciales de reconocimiento y define cuándo pausar.

Usando "pentest-coordinator". Encontré un formulario de carga web y varios intentos fallidos de contraseña.

Resultado esperado:

La skill separa las pruebas web de las pruebas de credenciales, registra los intentos fallidos y recomienda una próxima hipótesis delimitada.

Usando "pentest-coordinator". Revisa mis hallazgos de laboratorio de Active Directory para ideas de escalada de privilegios.

Resultado esperado:

La skill agrupa los hallazgos por permisos de usuario, indicadores de Kerberos, servicios de certificados y evidencia de política de contraseñas.

Auditoría de seguridad

Crítico
v8 • 6/7/2026 Abrir el informe versionado

The scanner produced some markdown-fence false positives, but the skill intent is clearly high risk. It coordinates autonomous network scanning, exploitation, credential attacks, privilege escalation, and anti-stop behavior until user and root flags are captured. The skill should not be published without major safety controls and removal of autonomous offensive execution.

2
Archivos escaneados
1,669
Líneas analizadas
100
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (13)

Crítico
SKILL.md:13-45SKILL.md:175-190SKILL.md:821-865AD_ATTACK_SUPPLEMENT.md:3-60
Autonomous Offensive Execution Without User Control
The skill requires continuous execution until both user and root flags are captured, forbids stopping or asking for help, and blocks summaries before completion.
Multiple sections explicitly state that the agent cannot stop, cannot ask for help, and must continue offensive actions until flags are found.
Crítico
SKILL.md:8-10SKILL.md:400-412SKILL.md:740-773
End-to-End Exploitation and Privilege Escalation Objective
The skill is designed to progress from reconnaissance through exploitation and privilege escalation, including webshell execution, sudo shell escape, and root flag capture.
The purpose statement and example flow directly define the objective as compromising a target and obtaining user and root flags.
Alto
AD_ATTACK_SUPPLEMENT.md:402-403
Network reconnaissance
- If "Everyone" or "Anonymous" is member, extensive read access
This Active Directory supplement describes using broad legacy access to read sensitive attributes such as LAPS passwords. That is actionable reconnaissance and credential exposure guidance.
Alto
SKILL.md:118
System reconnaissance
rationale = "Avoid account lockout - spray, don't brute"
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:266
System reconnaissance
ONLY valid stop condition:
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:577
System reconnaissance
- Avoid interactive tools (use flags: `-y`, `--non-interactive`)
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:1078
System reconnaissance
→ Each time: Check history to avoid repeating
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:202
Network scanning tools
nmap --script=vuln,discovery -p- TARGET
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Mostrar los 13 problemas confirmados
Alto
SKILL.md:632
Network scanning tools
nmap --script=vuln,discovery -p- TARGET
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:636
Network scanning tools
Re-read nmap output
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:697
Network scanning tools
- Port scanning strategies (nmap, masscan)
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:745
Network scanning tools
4. **Action**: Execute `nmap -p- -T4 10.10.10.1`, update state
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:96-159SKILL.md:943-1010AD_ATTACK_SUPPLEMENT.md:64-108AD_ATTACK_SUPPLEMENT.md:128-140
Credential and Active Directory Abuse Playbook
The skill includes repeatable workflows for password spraying, PASSWD_NOTREQD exploitation, skeleton object abuse, LDAP modification, and other Active Directory attack paths.
The files provide concrete credential attack budgets and named AD abuse techniques with protocol-specific steps.
Elementos de revisión de capacidades (100)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Crítico
SKILL.md:760-763
Ruby/shell backtick execution
15. **Action**: Trigger shell via `curl http://10.10.10.1/uploads/shell.phtml?cmd=id`
This location directs exploitation that yields command execution or a root shell, such as a webshell trigger or sudo-based shell escape. That is direct offensive capability, not benign documentation.
Crítico
SKILL.md:770-772
Ruby/shell backtick execution
25. **Action**: Exploit via `sudo vim -c ':!/bin/sh'`
This location directs exploitation that yields command execution or a root shell, such as a webshell trigger or sudo-based shell escape. That is direct offensive capability, not benign documentation.
Crítico
SKILL.md:770
Unix shell invocation
25. **Action**: Exploit via `sudo vim -c ':!/bin/sh'`
This location directs exploitation that yields command execution or a root shell, such as a webshell trigger or sudo-based shell escape. That is direct offensive capability, not benign documentation.
Crítico
SKILL.md:770
sudo privilege escalation
25. **Action**: Exploit via `sudo vim -c ':!/bin/sh'`
This location directs exploitation that yields command execution or a root shell, such as a webshell trigger or sudo-based shell escape. That is direct offensive capability, not benign documentation.
Alto
SKILL.md:19-53
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:53-55
Ruby/shell backtick execution
1. Create or load state file: `.pentest-state.json`
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:55-58
Ruby/shell backtick execution
3. Set phase to `reconnaissance`
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:86-97
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:97-160
Ruby/shell backtick execution
```
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:163-173
Ruby/shell backtick execution
```
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:173-176
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:176-191
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:194-210
Ruby/shell backtick execution
```
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:213-249
Ruby/shell backtick execution
```
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:252-273
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:273-277
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:277-294
Ruby/shell backtick execution
1. **Load current state** from `.pentest-state.json`
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:294-296
Ruby/shell backtick execution
1. **Update state** with `current_action` description
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:300-307
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:310-322
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:322
Ruby/shell backtick execution
- Search common locations: `/home/*/user.txt`, `/root/root.txt`
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:327-334
Ruby/shell backtick execution
- Record to `successful_paths` with details
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:334-344
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:347-367
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:367-370
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:379-382
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:390-393
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:398-411
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:411
Ruby/shell backtick execution
- Trigger: Both `user` and `root` flags captured
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:426-492
Ruby/shell backtick execution
```markdown
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:504-514
Ruby/shell backtick execution
```
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:514-517
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:517-525
Ruby/shell backtick execution
```
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:525-526
Ruby/shell backtick execution
- Read `user.txt` or equivalent (actual 32-char hex string)
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:526-529
Ruby/shell backtick execution
- Read `root.txt` or equivalent (actual 32-char hex string)
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:533-536
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:536-573
Ruby/shell backtick execution
```
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:573-577
Ruby/shell backtick execution
```
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:577
Ruby/shell backtick execution
- Avoid interactive tools (use flags: `-y`, `--non-interactive`)
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:581-600
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:600-603
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:603-619
Ruby/shell backtick execution
```
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:619-622
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:622-646
Ruby/shell backtick execution
```
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:688-696
Ruby/shell backtick execution
```
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:696-702
Ruby/shell backtick execution
**Reconnaissance Knowledge** (`.claude/skills/recon/SKILL.md`):
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:702-708
Ruby/shell backtick execution
**Exploitation Knowledge** (`.claude/skills/exploitation/SKILL.md`):
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:708-727
Ruby/shell backtick execution
**Privilege Escalation Knowledge** (`.claude/skills/privesc/SKILL.md`):
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:734-743
Ruby/shell backtick execution
```
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:743-745
Ruby/shell backtick execution
2. **Initialize**: Create `.pentest-state.json` with target, password_attempts=0, stuck_counter=0
This location is part of the skill’s coordinated reconnaissance, exploitation, and privilege escalation workflow. The context confirms an intended offensive use rather than a benign utility pattern.
Alto
SKILL.md:745-748
Ruby/shell backtick execution
4. **Action**: Execute `nmap -p- -T4 10.10.10.1`, update state
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:748-760
Ruby/shell backtick execution
7. **Action**: Execute `gobuster dir -u http://10.10.10.1 -w /usr/share/wordlists/dirb/common.txt`
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:763-764
Ruby/shell backtick execution
18. **Action**: Execute `find /home -name user.txt 2>/dev/null`
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:764-765
Ruby/shell backtick execution
19. **Observation**: Found `/home/alice/user.txt`
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:765-766
Ruby/shell backtick execution
20. **Action**: Execute `cat /home/alice/user.txt`
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:766-768
Ruby/shell backtick execution
21. **Observation**: User flag captured: `abc123def456...`, update state
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:768-769
Ruby/shell backtick execution
23. **Action**: Check `sudo -l`
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:769-770
Ruby/shell backtick execution
24. **Observation**: Can run `/usr/bin/vim` as root
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:772-773
Ruby/shell backtick execution
27. **Action**: Execute `cat /root/root.txt`
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:773-782
Ruby/shell backtick execution
28. **Observation**: Root flag captured: `def456abc123...`, update state
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:782-802
Ruby/shell backtick execution
```
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:802-827
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:827-842
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:846-865
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:865-871
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:903-917
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:917-943
Ruby/shell backtick execution
```json
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:943-1013
Ruby/shell backtick execution
```
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:1020-1022
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:1022-1031
Ruby/shell backtick execution
**See**: `.claude/skills/coordinator/AD_ATTACK_SUPPLEMENT.md` for complete technique lists and comma
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:1031-1046
Ruby/shell backtick execution
```json
This location gives prescriptive credential or Active Directory attack workflow, including password spraying, anomaly exploitation, or repeated authentication testing. That is actionable offensive guidance.
Alto
SKILL.md:1050-1083
Ruby/shell backtick execution
```
This location restricts stopping, status updates, user confirmation, or help requests until flags are captured. That undermines user control while driving offensive actions.
Alto
SKILL.md:768
sudo privilege escalation
23. **Action**: Check `sudo -l`
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Alto
SKILL.md:748
Hardcoded URL
7. **Action**: Execute `gobuster dir -u http://10.10.10.1 -w /usr/share/wordlists/dirb/common.txt`
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:760
Hardcoded URL
15. **Action**: Trigger shell via `curl http://10.10.10.1/uploads/shell.phtml?cmd=id`
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:745
Hardcoded IP address
4. **Action**: Execute `nmap -p- -T4 10.10.10.1`, update state
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:748
Hardcoded IP address
7. **Action**: Execute `gobuster dir -u http://10.10.10.1 -w /usr/share/wordlists/dirb/common.txt`
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:760
Hardcoded IP address
15. **Action**: Trigger shell via `curl http://10.10.10.1/uploads/shell.phtml?cmd=id`
This location directs network reconnaissance or web enumeration against a target using tools such as nmap, gobuster, or curl. In this skill context it is part of an autonomous attack workflow.
Alto
SKILL.md:763
Standard device file access
18. **Action**: Execute `find /home -name user.txt 2>/dev/null`
This location supports post-exploitation activity such as flag discovery, shell handling, or privilege escalation. The surrounding workflow aims to gain user and root access.
Medio
SKILL.md:17-19
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:296-300
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:307-310
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:370-379
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:382-390
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:393-398
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:497-504
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:529-530
Ruby/shell backtick execution
Update `.pentest-state.json` after EVERY action:
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:530-533
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:646-653
Ruby/shell backtick execution
```
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:653-664
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:664-667
Ruby/shell backtick execution
```
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:667-669
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:669-672
Ruby/shell backtick execution
```
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:672-688
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:871-903
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:1013-1020
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:1086-1102
Ruby/shell backtick execution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:873
Shell command substitution
user_flag=$(jq -r '.flags.user' .pentest-state.json)
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:874
Shell command substitution
root_flag=$(jq -r '.flags.root' .pentest-state.json)
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.
Medio
SKILL.md:871-903
Template literal with command substitution
```bash
This location instructs the agent to execute local shell commands for state checks or state mutation. The commands are state-focused, but they still create external command execution in a high-risk skill.

Factores de riesgo

⚙️ Comandos externos (105)
SKILL.md:17-19 SKILL.md:19-53 SKILL.md:53-55 SKILL.md:55-58 SKILL.md:58-86 SKILL.md:86-97 SKILL.md:97-160 SKILL.md:160-163 SKILL.md:163-173 SKILL.md:173-176 SKILL.md:176-191 SKILL.md:191-194 SKILL.md:194-210 SKILL.md:210-213 SKILL.md:213-249 SKILL.md:249-252 SKILL.md:252-273 SKILL.md:273-277 SKILL.md:277-294 SKILL.md:294-296 SKILL.md:296-300 SKILL.md:300-307 SKILL.md:307-310 SKILL.md:310-322 SKILL.md:322 SKILL.md:327-334 SKILL.md:334-344 SKILL.md:344-347 SKILL.md:347-367 SKILL.md:367-370 SKILL.md:370-379 SKILL.md:379-382 SKILL.md:382-390 SKILL.md:390-393 SKILL.md:393-398 SKILL.md:398-411 SKILL.md:411 SKILL.md:426-492 SKILL.md:492-497 SKILL.md:497-504 SKILL.md:504-514 SKILL.md:514-517 SKILL.md:517-525 SKILL.md:525-526 SKILL.md:526-529 SKILL.md:529-530 SKILL.md:530-533 SKILL.md:533-536 SKILL.md:536-573 SKILL.md:573-577 SKILL.md:577 SKILL.md:581-600 SKILL.md:600-603 SKILL.md:603-619 SKILL.md:619-622 SKILL.md:622-646 SKILL.md:646-653 SKILL.md:653-664 SKILL.md:664-667 SKILL.md:667-669 SKILL.md:669-672 SKILL.md:672-688 SKILL.md:688-696 SKILL.md:696-702 SKILL.md:702-708 SKILL.md:708-727 SKILL.md:727-734 SKILL.md:734-743 SKILL.md:743-745 SKILL.md:745-748 SKILL.md:748-760 SKILL.md:760-763 SKILL.md:763-764 SKILL.md:764-765 SKILL.md:765-766 SKILL.md:766-768 SKILL.md:768-769 SKILL.md:769-770 SKILL.md:770-772 SKILL.md:772-773 SKILL.md:773-782 SKILL.md:782-802 SKILL.md:802-827 SKILL.md:827-842 SKILL.md:842-846 SKILL.md:846-865 SKILL.md:865-871 SKILL.md:871-903 SKILL.md:903-917 SKILL.md:917-943 SKILL.md:943-1013 SKILL.md:1013-1020 SKILL.md:1020-1022 SKILL.md:1022-1031 SKILL.md:1031-1046 SKILL.md:1046-1050 SKILL.md:1050-1083 SKILL.md:1083-1086 SKILL.md:1086-1102 SKILL.md:873 SKILL.md:874 SKILL.md:871-903 SKILL.md:770 SKILL.md:768 SKILL.md:770
🌐 Acceso a red (7)
SKILL.md:748 SKILL.md:760 SKILL.md:656 SKILL.md:742 SKILL.md:745 SKILL.md:748 SKILL.md:760
📁 Acceso al sistema de archivos (2)
SKILL.md:763 SKILL.md:641-642

Patrones detectados

Network reconnaissanceSystem reconnaissance×4Network scanning tools×5
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/charleskozel-pentest-coordinator/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/charleskozel-pentest-coordinator/security.svg)](https://skillstore.io/skills/charleskozel-pentest-coordinator?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/charleskozel-pentest-coordinator?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/charleskozel-pentest-coordinator/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/charleskozel-pentest-coordinator.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

CharlesKozel. (2026). pentest-coordinator security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/charleskozel-pentest-coordinator/audits/8

Cita BibTeX

@techreport{charleskozel-charleskozel-pentest-coordinator-2026, author = {CharlesKozel}, title = {pentest-coordinator security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/charleskozel-pentest-coordinator/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "pentest-coordinator security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "CharlesKozel" date-released: "2026-07-06" url: "https://skillstore.io/skills/charleskozel-pentest-coordinator/audits/8" identifiers: - type: other value: "skillstore:charleskozel-pentest-coordinator:audit:8" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
55
Arquitectura
85
Mantenibilidad
87
Contenido
70
Comunidad
70
Cumplimiento de la especificación

Lo que puedes crear

Ejecutar Ejercicios de Laboratorio CTF

Guiar a un aprendiz mediante notas estructuradas y seguimiento de fases durante un objetivo capture-the-flag permitido.

Organizar Laboratorios Internos de Red Team

Registrar hipótesis de ataque, intentos fallidos y rutas de escalada dentro de un laboratorio corporativo controlado.

Enseñar Metodología de Pruebas de Penetración

Demostrar cómo los hallazgos de reconocimiento se conectan con decisiones de explotación y escalada de privilegios.

Prueba estos prompts

Iniciar un Laboratorio Delimitado 
Inicia una evaluación de laboratorio autorizada para el objetivo [target]. Registra alcance, supuestos, fase inicial y condiciones seguras de detención.
Revisar el Progreso Actual 
Revisa mis notas actuales de laboratorio. Resume servicios conocidos, rutas fallidas, próximos vectores probables y cualquier preocupación de seguridad.
Planificar Investigación de AD 
Dado estos hallazgos autorizados de laboratorio de Active Directory, crea un plan de investigación priorizado con la evidencia necesaria para cada hipótesis.
Auditar Decisiones de Ataque 
Evalúa este flujo de trabajo de laboratorio en busca de métodos repetidos, supuestos inseguros, verificaciones de autorización ausentes y mejor documentación defensiva.

Mejores prácticas

  • Usa la skill solo contra sistemas donde la autorización escrita y el alcance estén claros.
  • Añade aprobación humana antes de cada acción de red, explotación, credenciales o escalada de privilegios.
  • Mantén una pista de auditoría defendible de hallazgos, comandos, marcas de tiempo y decisiones.

Evitar

  • No uses la skill en objetivos públicos o de terceros sin permiso explícito.
  • No permitas la ejecución autónoma sin confirmación del usuario y límites de tasa.
  • No trates la captura de flags como más importante que la seguridad, la legalidad o los límites del alcance.

Preguntas frecuentes

¿Es seguro usar esta skill en sistemas reales?
Úsala solo con autorización escrita y un alcance definido. La skill actual contiene flujos de trabajo ofensivos de alto riesgo.
¿Ejecuta comandos por sí misma?
La skill instruye a un agente para ejecutar comandos como parte de su flujo de trabajo. Añade controles de confirmación antes de usarla.
¿Puede ayudar con la formación defensiva?
Sí, en un laboratorio controlado puede mostrar cómo los hallazgos conducen a decisiones de explotación y escalada.
¿Admite laboratorios de Active Directory?
Sí. Incluye flujos de trabajo para anomalías de políticas de contraseñas, permisos de objetos, Kerberos y servicios de certificados.
¿Qué deberían preparar primero los usuarios?
Prepara autorización escrita, alcance del objetivo, reglas del laboratorio, límites de tasa y un proceso claro de detención.
¿Por qué es importante la revisión del marketplace para esta skill?
La skill combina escaneo, explotación, pruebas de credenciales y comportamiento anti-detención. Estos requieren salvaguardas estrictas antes de la publicación.

Detalles del desarrollador

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/CharlesKozel/vulhub_automated_pentester/tree/main/agents/claude/skills/coordinator

Ref.

dd4a3ef9f20ddf38830950b4bb713df96b431fd6

Actualidad del mantenimiento

21/7/2026

Uso

7 descargas · 203 vistas

Estructura de archivos

📄 AD_ATTACK_SUPPLEMENT.md

📄 SKILL.md

Más de CharlesKozel

Ver todo

Habilidades relacionadas

Ver todo