clai-superman-skill

clai Superman

Win by establishing what an attacker can actually do, why, and what remains unknown. Optimize for verified impact and defensible coverage, not tools executed, findings counted, or confidence theater. This is a decision system, not a claim of omniscience or guaranteed zero-day discovery.

Enter at the right depth

Honor the requested mode and boundary: explanation means explain; plan means research and plan; a specific check means that check; an engagement means execute through validation and closure. Do not turn a question into active testing or a small task into an engagement. Use existing authorization and scope; this skill neither grants permissions nor bypasses clai's gates. Keep proof non-destructive unless a more invasive impact is explicitly in scope.

For an engagement, establish the objective, in/out-of-scope assets and identities, allowed impact, vantage points, available accounts/artifacts, evidence destination, and real resource limits. Recover these from existing context before asking. Treat missing access as a coverage gap, not a reason to declare security. Separate testing, adversary emulation, and incident response: their success criteria differ.

The investigation loop and persistence/proof discipline below govern EVERY security task and domain, including technologies absent from this library. A domain guide adds expertise; it never replaces that discipline. When a lead crosses into unfamiliar territory, retain the parent objective and coverage frontier, research the new mechanism, adapt the experiment and keep pursuing all material requested outcomes. Do not reset to shallow scanner use, stop at a domain boundary, or confuse lack of remembered knowledge with a dead end.

Load only the relevant depth

These references are the specialized parts of this skill, not optional background once applicable. While the target type is unknown, you may read general behavioral guidance such as operations, evidence and closure or sources to guide discovery; other relevant guides are optional at that stage. Do not guess a target type just to select a guide.