transilienceai

transilienceai/communitytools

Agent

Technical truth gate. Re-derives each finding's claim from the parsed rule AST and returns yes/no/uncertain. Uncertain findings route to held/ for human reviewer.

transilienceai/communitytools

Agent

Editorial gate. Final pass on phrasing, framework-citation-version accuracy, cross-finding consistency. Flags (never blocks) findings that need author attention.

transilienceai/communitytools

Agent

20+ year offensive security reviewer. Receives one logical firewall's normalized ruleset (already through deterministic detectors) and flags semantic concerns detectors can't catch — business-logic gaps, trust-boundary violations, unusual service combos. 2-4 instances dispatched in parallel during /launch.

transilienceai/communitytools

Command

Parse all configs in the current engagement, dispatch senior-pentester subagents in parallel, run the validation chain, emit findings ready for /review.

transilienceai/communitytools

Command

Curator commands for learning-loop candidates. Usage — /pending list | /pending review | /pending promote | /pending reject | /pending hold.

transilienceai/communitytools

Command

Render a consolidated customer-review Excel workbook, optional audit-grade PDF, and chain-of-custody manifest from approved findings. Gated on ≥1 approve in feedback.jsonl.

transilienceai/communitytools

Command

Triage findings in chat. Operator sees each finding with evidence, chooses approve / request-changes / other per finding (or batches).

transilienceai/communitytools

Command

Start a new firewall-review engagement. Argus greets the operator, asks all six scoping questions in one batch, scaffolds the engagement folder, and waits for configs. No arguments.

transilienceai/communitytools

Skill Claude CodeCodex

GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review. Use when asked to commit, push, create PRs/branches/issues, or manage git workflow.

transilienceai/communitytools

Skill Claude CodeCodex

HackerOne bug bounty automation - parses scope CSVs, deploys parallel pentesting agents per asset, validates PoCs, and generates platform-ready submission reports.

transilienceai/communitytools

Skill Claude CodeCodex

HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions.

transilienceai/communitytools

Skill Claude CodeCodex

Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.

transilienceai/communitytools

Skill Claude CodeCodex

Injection vulnerability testing - SQL, NoSQL, OS Command, SSTI, XXE, and LDAP/XPath injection techniques.

transilienceai/communitytools

Skill Claude CodeCodex

Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC, storage, crypto, signing), dynamic analysis (Frida/objection, TLS-pinning + root/jailbreak bypass, traffic interception)…

transilienceai/communitytools

Skill Claude CodeCodex

Offensive testing of perimeter network appliances and VPN crypto — IKE/IPsec (aggressive-mode, transform/DH enum, NAT-T), Check Point SIC/OPSEC, safe firmware/patch-level inference for FortiGate/PAN-OS/Cisco ASA/Citrix feeding CVE applicability, NTLM Type-2 target-info decode, handshake-completion TLS-version probing…

transilienceai/communitytools

Skill Claude CodeCodex

Open-source intelligence gathering - company repository enumeration, secret scanning, git history analysis, employee footprint, and code exposure discovery.

transilienceai/communitytools

Skill Claude CodeCodex

Fetches and extracts payloads from PayloadsAllTheThings on demand. Bake into executor prompts for live payload enrichment.

transilienceai/communitytools

Skill Claude CodeCodex

Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET /…

transilienceai/communitytools

Agent

Role brief for the dynamic-tester agent — performs runtime / negative testing (Perform / Test methods) against an authorized running instance for PCI SSS v2.0 dynamic Test Requirements, capturing dynamicobservation evidence. When no running instance is authorized, the requirement is REQUIRESMANUALREVIEW, never a faked…

transilienceai/communitytools

Agent

Role brief for the evidence-gatherer agent — collects source-code and documentation evidence for a PCI SSS v2.0 Test Requirement (Examine / static-analysis methods), writing verbatim file+line+quote evidence to the per-requirement evidence dir. Mounted by the workflow Gather phase.

transilienceai/communitytools

Agent

Role brief for the blind refutation-validator agent — independently tries to disprove a proposed MET/NOTMET PCI SSS v2.0 verdict from the evidence package alone, defaulting to skepticism, and flags citationdoubt when a quote looks fabricated. N run in parallel per requirement; a majority refute kills the verdict.

transilienceai/communitytools

Agent

Role brief for the verdict-assessor agent — assigns a RequirementVerdict (MET / NOTMET / PARTIALLYMET / NOTAPPLICABLE / REQUIRESMANUALREVIEW) to a PCI SSS v2.0 Test Requirement from its gathered evidence and the adversarial refuter votes, applying the kill rules. Mounted by the workflow Assess/Verdict step.

transilienceai/communitytools

Skill Claude CodeCodex

Run a professional penetration engagement OR a network vulnerability scan from a scope. WEB mode (apex domains / app URLs) — mandatory surface expansion, systematic OWASP attack-class coverage, reversible active exploitation, authoritative validation, Transilience PDF. NETWORK mode (a list of IPs/CIDRs, e.g. 1500…

transilienceai/communitytools

Skill Claude CodeCodex

Generate ONE strong password and apply it to each referenced file (PDF, Word, Excel, PowerPoint, or any type). Use when asked to password-protect / encrypt / lock one or more deliverable files with a single password before sharing.