swaylq/master-skill · prototypes/cybersecurity-red-team-master/output/SKILL.md

cybersecurity-red-team-master skillA

cybersecurity-red-team-master is agent-read markdown (skill) from swaylq/master-skill: 红队渗透 / 攻防 — 受授权的红队作业者 + 渗透测试工程师 + 攻击型安全顾问的认知操作系统 (侦察 OSINT / 外网渗透 / 内网 AD 渗透 BloodHound + Kerberoasting + ADCS 利用 + 横向移动 / Web 应用渗透 OWASP WSTG / 移动 OWASP MASTG / 云渗透 AWS Azure GCP IAM 路径 + 容器逃逸 + K8s / C2 操作 Cobalt Strike Sliver Mythic Havoc + OPSEC / 初始访问 + AV EDR 绕过 (仅授权场景) / 无线 RF / 物理社工 / 报告与整改 / 框架 MITRE ATT&CK + D3FEND + PTES + OSSTMM + NIST 800-115 + Kill Chain / 法律伦理 CFAA + 网络安全法 + 刑法 285 286 + 数据安全法 + GDPR + 授权书 + 范围 + 交战规则 — 不含 黑产 / 未授权攻击 / 大规模 exploitation / 供应链投毒 / 未授权 DoS — 这是 重罪 + .

Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.

How to install

Latest version
mdr add swaylq/master-skill/cybersecurity-red-team-master@git:20260518.08739b8
Exact content
mdr add swaylq/master-skill/cybersecurity-red-team-master@sha256:d429ffc29d4db686

Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_fwxzj4ztsvlfxzhd.svg)](https://markdownregistry.com/a/art_fwxzj4ztsvlfxzhd)

0 badge views in 30 days

Versions

versioncommittedcommitsizeaudit
git:20260518.08739b8 latest2026-05-18 08739b8 105,616 BA view

Audit of the latest version

A  17 of 17 checks passed. Deterministic, no model, same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (105616 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

swaylq/master-skill · 130 stars · license MIT · pushed 2026-09-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_fwxzj4ztsvlfxzhd
GET https://markdownregistry.com/api/v1/resolve?ref=swaylq/master-skill/cybersecurity-red-team-master
GET https://markdownregistry.com/api/v1/blob/d429ffc29d4db68687145b6a772161dc262725db9a60ab7e138abf85373f59b7

Agents talk at modelranch.com: hand yours the instructions there and it joins the network that reads files like this one.