‹ 首页

cyberedge-discover-services

@symph0nia · 收录于 5 天前 · 上游提交 6 天前

Run controlled TCP connect service discovery through the CyberEdge Agent Protocol for an explicitly authorized Scope. Use when an AI agent must identify exposed baseline services on approved domain or IP targets; never use for ambiguous targets, vulnerability exploitation, arbitrary port ranges, or targets without a human-provided authorization reference.

适合你,如果需要对授权目标进行服务发现扫描

/ 通过 npx 安装 校验哈希
npx oh-my-skill add symph0nia/cyberedge/cyberedge-discover-services
/ 通过 bash 安装
curl -fsSL https://oh-my-skill.com/install.sh | bash -s -- symph0nia/cyberedge/cyberedge-discover-services
/ 已经装过?验证本机副本,不用重装
npx oh-my-skill verify symph0nia/cyberedge/cyberedge-discover-services
安装目标可用 --agent / --scope 或 --to 明确指定;省略时只会在唯一已存在的 agent 目录上自动选择,零命中或多命中会停止并提示。content_hash 缺失或不一致均拒装。
606GitHub stars
~463最小装载
~463含声明引用
~598文本包总量
索引托管

怎么用

商店整理自技能原文 · 版本 0af016f · 表述以原文为准
它做什么

装好后,Claude可以运行受控的TCP连接扫描,识别已授权目标上暴露的基础服务,并返回开放端口列表和服务提示(非产品名)。

什么时候触发

当用户明确提供一个已授权的域名或IP范围,并请求扫描其开放服务时触发。

装好后可以这样说
触发GetScope和StartScan。
需事先确认授权。
扫描后返回端口和提示。
技能原文 SKILL.md作者撰写 · Apache-2.0 · 0af016f

Discover CyberEdge Services

Use cyberedge-agent as the JSON machine bridge. This Skill performs active network connections and therefore requires both an existing authorized Scope and the scan.active capability.

Preconditions
  • Confirm the exact Scope and its human-provided authorization reference before starting.
  • Refuse ambiguous ownership, third-party targets, arbitrary port lists, or requests to evade controls.
  • Use a fresh request_id and idempotency_key for each mutation.
  • Send this Skill's declared name and version in every invocation context.
Workflow
  1. Call GetScope and verify every target remains inside the requested authorization boundary.
  2. Call StartScan with policy_service_baseline. The server controls the baseline TCP port set; do not attempt to override it.
  3. Call WatchTask and continue from the last accepted sequence after reconnecting.
  4. Stop at completed, failed, or canceled.
  5. Call SearchServices with the Scope ID and GetTaskReport with the completed Task ID.
  6. Report service hints as port-based hints, not banner-verified product identities.
  7. Preserve coverage errors and evidence references. Never interpret a timeout as proof that a service does not exist.

Example:

{"request_id":"req_...","idempotency_key":"idem_...","agent_id":"agent_...","skill_name":"cyberedge-discover-services","skill_version":"0.1.0","action":"start_scan","scope_id":"scope_...","policy_id":"policy_service_baseline"}
Failure handling
  • On CAPABILITY_DENIED, stop; do not switch identities or Skills.
  • On authorization or Scope validation failure, stop and request a corrected authorization boundary.
  • Retry only typed retryable failures.
  • Do not fall back to external scanners or direct socket commands.
Output

Return the Scope ID, Task ID, terminal state, open TCP ports, service hints, evidence references, and coverage limitations.

按 Apache-2.0 许可原样转载,未经改动 · 在 GitHub 查看 →

评论

登录即可评论;带「已验证安装」的,是发布者名下有本店的安装或持有记录。