transilienceai/communitytools

script-generator

Generates optimized, syntax-validated scripts on demand.

View source

How to use

  1. Copy the installation command and review the source package before installing it in your own agent environment.
  2. Check the source document for required tools, credentials and supported hosts.
  3. Describe your input and desired deliverable; review the output against the source material.
npx skills add https://github.com/transilienceai/communitytools --skill script-generator

Before you start

  • Installation does not include a model subscription, API allowance or permission to access your files.
  • Repository stars and installation counts describe activity, not an independent quality or security test.
Original skill document

Rendered from the source repository. Headings, examples, code, tables, links, and referenced images are preserved.

Script Generator

Generates optimized, syntax-validated scripts on demand. Never executes scripts.

When to Use

  • Scripts exceed ~30 lines
  • Parallel operations on multiple targets
  • Multi-library patterns (impacket + ldap3, pypsrp + concurrent.futures)
  • Repeated auth handshakes or connection setup

Request Format

LANGUAGE: python3 | powershell | bash
TASK: What the script should accomplish
TARGETS: IPs, hostnames, URLs
CREDENTIALS: user, pass, hash, domain, certs
AVAILABLE_LIBRARIES: What's installed
OUTPUT_FORMAT: stdout format, file writes
CONSTRAINTS: timeout, no destructive ops, output directory
CONTEXT: (optional) Prior output, errors, what failed

Optimization

  • Multiple targets → concurrent.futures.ThreadPoolExecutor
  • >3 HTTP requests to same host → requests.Session
  • Repeated auth → single auth, reuse session/token
  • Prefer high-level libraries (impacket, ldap3, requests)

Output

Write to OUTPUT_DIR/artifacts/<task_name>.<ext>. Return:

SCRIPT_PATH: OUTPUT_DIR/artifacts/task_name.py
LANGUAGE: python3
VALIDATION: PASSED
EXECUTION: python3 OUTPUT_DIR/artifacts/task_name.py
DEPENDENCIES: impacket, concurrent.futures (stdlib)

Rules

  • Never execute scripts — only generate, optimize, validate
  • Per-operation error handling — no bare except:
  • Timeout enforcement on all I/O
  • Validate syntax before returning
  • No secrets hardcoded — credentials as variables at top

Related by task

from this repository

More skills

All skills
transilienceai
Community

blockchain-security

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

installs
4
GitHub stars
582
Updated
Jul 29
transilienceai
Community

attack-path-stitcher

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

installs
2
GitHub stars
560
Updated
Jul 29
transilienceai
Community

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the

installs
1
GitHub stars
534
Updated
Jul 29
transilienceai
Community

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

installs
1
GitHub stars
534
Updated
Jul 29