scope-discipline

仓库创建 2026年5月19日最近提交 24 天前SkillHot 收录 21 天前

▸ 精选理由

确保每次交互都有书面授权，适合渗测团队和顾问流程控制

这个 Skill 做什么

在与任何主机/资产交互前定义并强制执行授权范围与边界

在对任何主机、IP、URL 或资产动手前，先把书面的授权边界定好并强制执行，避免越权。上线前、扫描、枚举或利用等任何交互前都要用，确保法律和道德合规。特点是把范围写进可机器读的 scope.json，形成不可绕过的授权边界，像安全圈的“无授权不触碰”硬规则。

▸ 展开 SKILL.md 英文原文

Use when about to send a request to, scan, enumerate, exploit, or otherwise interact with any host, IP, URL, or asset — before the first packet reaches a target

Skill 开发管理授权范围合规操作流程通用

326

Stars

Forks

仓库内 Skill

+15

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/skills/scope-discipline/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/skills/scope-discipline/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Scope Discipline

## Overview

**The Iron Law: No target without authorization.** Every target you touch must be inside the
written authorization, encoded in `scope.json`. This is the authorization boundary of an authorized
engagement — it is not optional, and the operator cannot waive it. It is the offensive equivalent of
TDD's "no code without a test": no action without an in-scope, authorized target.

**Violating the letter of this rule is violating its spirit.**

## The rule

Before touching ANY target, confirm it is in scope:

```bash
python skills/coding-mastery/scripts/_lib/scope_guard.py check <target> --scope .engage/scope/scope.json
# exit 0 = in-scope (proceed) | exit 3 = OUT (s

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有