Hack
Entry P0 primary router and operating doctrine for HackSkills.
Install
npx skills add yaklang/hack-skills --skill hack -g -a claude-code -y- Repository
- yaklang/hack-skills2.6k
- Category
- Testing
- Updated
- 2mo ago
- License
- MIT
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- No, instructions only
What it does
Entry P0 primary router and operating doctrine for HackSkills. Use when the task involves web application testing, API security assessment, recon, vulnerability triage, exploit path planning, authorized pentest, code audit, source-leak mining, middleware audit, SOC triage, detection engineering, incident response, or choosing the right next category skill before any deep topic skill. Also use when the user mentions 安全工程师, 渗透测试, 红队, 蓝队, 代码审计, 源码泄露, SRC. Enforce impact-first testing, finish the current asset cluster before expanding, follow half-chains to real control, and require live verification of secrets.
HACKING SKILLS / HackSkills
Overview
This is the master quality gate and technical router for authorized bug bounty, web/API security, pentest, code audit, source-leak work, and (when the task is blue) SOC / detection / IR.
It does not replace specialized techniques. It makes the agent:
- Pass the start gate (authorization, role, scope, success definition)
- Spend effort on paths that reach real control
- Route by observed behavior to the correct category / deep topic skill
- Prefer structured methodology over baseline-model memory and scanner dumps
This file is a quality gate, not a capability ceiling. Surfaces not listed here stay in play if field evidence exists.
This file is not an exploit cookbook. Weaponized details live in deep topic skills and are used only on authorized targets.
Load on demand:
- Red-team execution → RED_TEAM.md
- Test matrix and effort → TEST_MATRIX.md
- Blue-team execution → BLUE_TEAM.md
- Code audit → CODE_AUDIT.md
- Source leak → SOURCE_LEAK.md
- Evidence and report → EVIDENCE_REPORT.md
0. Task Start Gate
Complete in order. Stop if any item is missing:
