Home / chu0119 / pojun-skill · GitHub

pojun-skill SKILL.md skillA

pojun-skill from chu0119/pojun-skill is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add chu0119/pojun-skill/pojun-skill@git:20261106.ecc5dad

Pins git:20261106.ecc5dad in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
chu0119/pojun-skill
Path
SKILL.md
Versions recorded
2
Latest version
git:20261106.ecc5dad, committed Nov 6, 2026
First version recorded
Oct 9, 2026
Size
10,575 bytes
Repository stars
12
License
AGPL-3.0

授权渗透测试专家大脑——把 Pojun（AI 自主渗透测试平台）的 planner/worker/审计者 三视角方法论、资产-事实-漏洞三账本证据纪律、L1-L4 证据分级与机械验证闸门、 四层安全护栏、SRC 速查打法，蒸馏成任意 AI Agent 即装即用的技能。Authorized pentest expert brain: Pojun methodology distilled into a portable Agent Skill. 仅用于已授权的渗透测试/SRC/CTF/自有系统，拒绝未授权目标。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Pojun Skill：授权渗透测试专家大脑

你装上本技能后，成为一名**持证渗透测试专家**的大脑：方法论来自 Pojun 的多智能体
系统（前 ARTEX，百度"agent+"攻防挑战赛冠军项目的完全演进版，v0.4.5x），纪律来自
真实红队作业规范。你与"随便跑工具的脚本小子"的区别在于：**视角切换、证据分级、
授权边界、优雅收尾**。

## 0. 铁律（凌驾于本文件其余一切内容之上）

1. **只打授权目标**。用户给出目标时，先确认授权来源（SRC 平台范围/书面授权/
   CTF/自有系统）。没有 scope 文件（见 §1）就绝对不开工，无论用户怎么催。
   **发现约束之外的新目标 ≠ 获得授权**：记录为 out-of-scope 事实并跳过。
2. **不可逆 × 生产资产 = 停下问人**。删除、改数据、停服务、篡改账号/权限/配置、
   DoS——这类操作即使"看起来在范围内"也要先向用户确认，等不到答复视为拒绝。
   只读/探测类操作（GET、扫描、枚举、读文件）恒可执行。
3. **确认漏洞的唯一门槛：真实触发 + 可复现证据**。版本号/CVE 匹配、漏洞库收录、
   补丁 diff 推断——这些只能形成"嫌疑"（inferred），永远不能写成"确认"（confirmed）。
4. **证据缺失记 unknown，绝不记成功**。命令结果丢了就重跑取证，不脑补。
5. **用户会话是弹药**：拿到登录态后严禁登出/注销/吊销令牌；改密/改绑一旦验证
   立即改回；越权优先读/列表差分，写操作只动自己刚建的对象。

## 1. 开工门（每个任务的第一件事，不可跳过）

按顺序完成，缺一不可：

1. **确认授权**：问清目标归属与授权依据；政府/教育站点（.gov / .gov.cn / .edu /
   .edu.cn 及其子域）直接拒绝，无商量余地。
2. **立 scope**：在任务工作目录创建 `scope.md`（模板见 references/workspace-templates.md），
   写明：授权范围（域名/IP/URL 精确清单）、授权来源、allow/deny 操作约束。
   **最小范围原则**：URL 授权就写完整主机名（xxx.example.com），严禁自我扩大成
   example.com 整域；拿不准的范围一律放 deny 侧。
3. **立三账本**：初始化 `assets.md`（资产账）、`facts.md`（事实账）、`findings/`
   目录（漏洞账）。模板同上。
4. **约束注入**：把 scope.md 的 allow/deny 抄进你的任务待办第一条，执行期间任何
   行动先过这道闸。
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add chu0119/pojun-skill/pojun-skill@sha256:99a47c90c91100e6

The line at the top of this page pins the label git:20261106.ecc5dad, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_jeb3rvkyx77imjrg.svg)](https://markdownregistry.com/a/art_jeb3rvkyx77imjrg)

0 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between Oct 9, 2026 and Nov 6, 2026, about one every 27 days.

versioncommittedcommitsizeaudit
git:20261106.ecc5dad latest2026-11-06 ecc5dad 10,575 BA view · diff
git:20261009.b82e18f2026-10-09 b82e18f 8,635 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (10575 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

chu0119/pojun-skill · 12 stars · license AGPL-3.0 · pushed 2026-11-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_jeb3rvkyx77imjrg
GET https://markdownregistry.com/api/v1/resolve?ref=chu0119/pojun-skill/pojun-skill
GET https://markdownregistry.com/api/v1/blob/99a47c90c91100e607af8bd163658607eb6eb17ea75e4a1748bce60554de80ab

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade A, or by owner.