Agent Skills
› zakirkun/deep-eye
› red-team
red-team
GitHubDeep Eye红队模拟技能，专注于Web/API侦察与立足点发现。覆盖攻击链各阶段，支持授权安全测试、ATT&CK映射及紫队交接，严格遵循规则-of-engagement与安全边界。
Trigger Scenarios
需要进行Web或API的安全渗透测试
执行红队对抗模拟或攻击路径分析
生成安全漏洞证据用于紫队交接
Install
npx skills add zakirkun/deep-eye --skill red-team -g -y
SKILL.md
Frontmatter
{
"name": "red-team",
"description": "Red team \/ adversary simulation with Deep Eye for web\/API footholds. Use for red team, adversary simulation, ATT&CK mapping, kill chain, \/red-team. Authorized engagements only."
}
Deep Eye — Red Team Skill
Goal-driven simulation. Deep Eye = web/API recon and foothold sensor.
Preconditions
RoE (objectives, crown jewels, no-go, detection expectations), legal auth, OPSEC plan.
Kill chain (web-heavy)
Recon → Initial access (app) → Session/token abuse → Lateral (SSRF/cloud) → Objective
| Phase | Deep Eye |
|---|---|
| Recon | enable_recon, OpenAPI, crawl |
| Access | Core inject, file_upload |
| Authz | idor, api_bola_deep, jwt_deep |
| Pivot | ssrf_cloud, cloud_misconfig |
| Mobile | mobile.enabled + Frida/static modules |
python deep_eye.py -u https://APP --scope-nl "SCOPE" -v --formats json
Purple handoff
| TTP | Deep Eye evidence | Telemetry expected | Gap | Fix |
|---|
Rules
Stay in RoE; no third-party pivots; no destructive malware; log for debrief.
Version History
- dc5059c Current 2026-08-20 02:49
