transilienceai/communitytools

script-generator

Generates optimized, syntax-validated scripts on demand.

Quelltext ansehen

Verwendung

  1. Installationsbefehl kopieren und das Quellpaket vor der Installation in der eigenen Agentenumgebung prüfen.
  2. Benötigte Werkzeuge, Zugangsdaten und Hosts im Original prüfen.
  3. Eingabe und gewünschtes Ergebnis beschreiben und die Ausgabe mit den Quellen abgleichen.
npx skills add https://github.com/transilienceai/communitytools --skill script-generator

Vor dem Start

  • Die Installation umfasst weder Modellabo noch API-Kontingent oder Dateizugriffsrechte.
  • Sterne und Installationen zeigen Aktivität, keine unabhängige Qualitäts- oder Sicherheitsprüfung.
Originales Skill-Dokument

Aus dem Quell-Repository gerendert; Überschriften, Beispiele, Code, Tabellen, Links und Bilder bleiben erhalten.

Script Generator

Generates optimized, syntax-validated scripts on demand. Never executes scripts.

When to Use

  • Scripts exceed ~30 lines
  • Parallel operations on multiple targets
  • Multi-library patterns (impacket + ldap3, pypsrp + concurrent.futures)
  • Repeated auth handshakes or connection setup

Request Format

LANGUAGE: python3 | powershell | bash
TASK: What the script should accomplish
TARGETS: IPs, hostnames, URLs
CREDENTIALS: user, pass, hash, domain, certs
AVAILABLE_LIBRARIES: What's installed
OUTPUT_FORMAT: stdout format, file writes
CONSTRAINTS: timeout, no destructive ops, output directory
CONTEXT: (optional) Prior output, errors, what failed

Optimization

  • Multiple targets → concurrent.futures.ThreadPoolExecutor
  • >3 HTTP requests to same host → requests.Session
  • Repeated auth → single auth, reuse session/token
  • Prefer high-level libraries (impacket, ldap3, requests)

Output

Write to OUTPUT_DIR/artifacts/<task_name>.<ext>. Return:

SCRIPT_PATH: OUTPUT_DIR/artifacts/task_name.py
LANGUAGE: python3
VALIDATION: PASSED
EXECUTION: python3 OUTPUT_DIR/artifacts/task_name.py
DEPENDENCIES: impacket, concurrent.futures (stdlib)

Rules

  • Never execute scripts — only generate, optimize, validate
  • Per-operation error handling — no bare except:
  • Timeout enforcement on all I/O
  • Validate syntax before returning
  • No secrets hardcoded — credentials as variables at top

Verwandte Aufgaben

aus demselben Repository

Weitere Skills

Alle Skills
transilienceai
Community

blockchain-security

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

Installationen
4
GitHub Stars
582
Aktualisiert
29. Juli
transilienceai
Community

attack-path-stitcher

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

Installationen
2
GitHub Stars
560
Aktualisiert
29. Juli
transilienceai
Community

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the

Installationen
1
GitHub Stars
534
Aktualisiert
29. Juli
transilienceai
Community

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

Installationen
1
GitHub Stars
534
Aktualisiert
29. Juli