cyberstrike-eino-demo SKILL.md skillB
cyberstrike-eino-demo from aipentest/cyberstrikeai is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add aipentest/cyberstrikeai/cyberstrike-eino-demo@git:20260721.2b63e3bPins git:20260721.2b63e3b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- aipentest/cyberstrikeai
- Path
skills/cyberstrike-eino-demo/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260721.2b63e3b, committed Jul 21, 2026
- Size
- 3,461 bytes
- Repository stars
- 7,963
- License
- Apache-2.0
满配示例技能包：SKILL.md + scripts/、references/、assets/ 等可选目录；验证 Eino skill 与 HTTP 包内路径（仅授权安全测试与教学）。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# CyberStrike × Eino 满配技能演示 本包与 [Agent Skills](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/overview) 一致：**`SKILL.md` 为清单 + 主说明**（无单独 `SKILL.yaml`）。同目录可有 **`scripts/`**、**`references/`**、**`assets/`** 等任意子目录（只要路径安全、未触达包深度/文件数上限），由 **`ListPackageFiles` / `resource_path`** 与 Eino 本机工具读取。补充说明见 `FORMS.md`、`REFERENCE.md`。 ## 概述 用于一次性验证： - HTTP `GET /api/skills` 列表（`script_count`、`file_count`、`progressive` 等为推导/扫描结果） - `GET /api/skills/cyberstrike-eino-demo?depth=summary|full` - `section=` 对应 `SKILL.md` 中 **`##` 标题**或 ASCII 标题的短 id（例如 `## Payload 样例` 常对应 `section=payload`） - 多代理内 ADK **`skill`** 工具（及可选本机文件工具）读取包内相对路径资源 - Eino `FilesystemSkillsRetriever` 对包摘要、`##` 分块、脚本条目的检索 **硬性要求**：任何测试须取得书面授权，并限定在约定范围与时间窗口内。 ## 授权测试工作流 1. **范围确认**：域名 / IP、接口列表、禁止动作（DoS、数据拖库等）。 2. **基线记录**：对约定资产做只读探测，保存时间戳与原始请求/响应摘要。 3. **分类测试**：按漏洞类型拆分任务；高风险操作前二次确认授权边界。 4. **证据与报告**：每个发现附带复现步骤、影响、修复建议；敏感数据脱敏。 5. **收尾**：删除临时账号、清理测试数据、移交报告。 ## Payload 样例 以下为 **教学占位**，实际测试需替换为目标上下文且不得用于未授权系统： - SQLi 探测（错误型）：`"'`（观察是否触发数据库错误信息泄露） - XSS 反射型（无害化）：`<script>alert(1)</script>` → 在靶场中应被编码或 CSP 拦截 - 路径穿越（只读验证）：`....//....//etc/passwd`（仅在授权文件读取场景） 详细列表见 `scripts/payloads.txt`。 …
Read the whole file at its exact version.
How to install
mdr add aipentest/cyberstrikeai/cyberstrike-eino-demo@sha256:72d7ebbb8b111be9The line at the top of this page pins the label git:20260721.2b63e3b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_6m5itukzcabbe4qb)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jul 21, 2026.
Audit of the latest version
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3461 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
aipentest/cyberstrikeai · 7,963 stars · license Apache-2.0 · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_6m5itukzcabbe4qb GET https://markdownregistry.com/api/v1/resolve?ref=aipentest/cyberstrikeai/cyberstrike-eino-demo GET https://markdownregistry.com/api/v1/blob/72d7ebbb8b111be935b227d51e44b3160b0510bc7fb0ecac99581b5832bd3f86
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.