recon-operations
claudeProvides authorized network, public-exposure, human, physical, and AI-system reconnaissance with explicit scope, contact, noise, evidence, and automation boundaries.
9 skills
152
claude
engagement-operations
Provides engagement planning, AI threat modeling, action-proof review, security-tool governance, findings writing, and report assembly with defensible evidence boundaries.
/
Plugin engagement-operations from marketplace zero-lab in zero-lab-ai/skills. Commands read from the repo's manifest — 19 days ago.
What it installs
Skills (7)
agent-action-proofGrades evidence for an AI agent's downstream actions without overstating what a callback, tool trace, file read, command result, or target change proves. Use when validating impact, writing findings, or reviewing agent test receipts.
ai-threat-modelBuilds an evidence-bound AI threat model from partial architecture, trust, identity, data-flow, and control information. Use when scoping an AI assessment, reviewing a design, or prioritizing realistic attack paths under uncertainty.
assessment-sequence-governanceValidates supplied immutable ordered manifests of opaque defensive assessment actions for authority, safeguards, evidence, and separate-operator review. Use when reviewing assessment sequencing without creating, changing, or executing actions.
engagement-report-assemblyAssembles supplied validated artifacts, immutable final findings, scope, methods, coverage, limitations, contradictions, and evidence indexes into a complete review-ready engagement package without rewriting, rescoring, hiding, closing, publishing, or contacting.
findings-reportWrites security findings that survive triage: reproducible, severity-justified, and fixable, in a fixed structure with a severity rubric. Use when turning a discovered vulnerability, misconfiguration, or weakness into a report entry, ticket, or disclosure.
security-test-tool-governanceGoverns supplied benign security-test tool artifacts through purpose, authority, provenance, artifact integrity, safety-test evidence, version-bound review, custody, change control, and defensive handoff. Use when reviewing proposed security tooling or deciding whether an externally supplied artifac
social-engineering-engagement-planPlans authorized defensive phishing simulations, vishing exercises, and other social-engineering engagements with explicit channel and cohort scope, pretext approval, participant safety, data minimization, readiness gates, metrics, and debrief. Use before measuring human-security exposure or reviewi
More from zero-lab-ai/skills
All 10 plugins →identity-security
claudeAssesses Active Directory, AD CS, Kerberos, credentials, privilege escalation, lateral movement, and durable identity exposure while separating structural paths from demonstrated access.
8 skills
152
Tracks authorized security assessment coverage across web, cloud, mobile, firmware, endpoint persistence, and offline password auditing without turning missing evidence into clean results.
6 skills
152
detection-validation
claudeBuilds and validates detections, audits telemetry coverage, tests defensive resilience, correlates incident evidence, and synthesizes control evidence without inflating coverage.
6 skills
152
Plans and assesses wireless, network-protocol, traffic, command-channel, and bounded covert-channel security work with explicit scope, safety, evidence, and detection boundaries.
5 skills
152
agent-security
claudeReviews agent and MCP surfaces, tests prompt-injection and runtime controls, and maps identity and authority across agent handoffs.
4 skills
152
Maintain engagement-operations?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins10 plugins