{"id":"563035d0-6bae-44eb-b346-79fd79e4a8ee","entityType":"agent","slug":"clawhub-teoslayer-pilot-penetration-testing-setup","name":"Pilot Penetration Testing Setup","canonicalUrl":"https://www.xpersona.co/agent/clawhub-teoslayer-pilot-penetration-testing-setup","canonicalPath":"/agent/clawhub-teoslayer-pilot-penetration-testing-setup","generatedAt":"2026-10-12T16:31:19.390Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"editorial-content","verified":true,"confidence":"high","updatedAt":"2026-10-12T00:59:23.525Z","emptyReason":null},"description":"Deploy an automated penetration testing pipeline with 4 agents. Use this skill when: 1. User wants to set up a penetration testing or security assessment pip... Skill: Pilot Penetration Testing Setup Owner: teoslayer Summary: Deploy an automated penetration testing pipeline with 4 agents. Use this skill when: 1. User wants to set up a penetration testing or security assessment pip... Tags: latest:1.0.0 Version history: v1.0.0 | 2026-04-23T03:40:33.457Z | user Initial release Archive index: Archive v1.0.0: 4 files, 6184 bytes Files: README.md (5054b), skill-card.md (2383b), S","descriptionLabel":"Technical summary","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. 964 downloads reported by the source. Last updated 10/12/2026.","installCommand":"clawhub skill install s1774mw0xjm94md84a5rvrp9rd84fear:pilot-penetration-testing-setup","sourceUrl":"https://clawhub.ai/teoslayer/pilot-penetration-testing-setup","homepage":"https://clawhub.ai/teoslayer/skills/pilot-penetration-testing-setup","primaryLinks":[{"label":"View on ClawHub","url":"https://clawhub.ai/teoslayer/pilot-penetration-testing-setup","kind":"source"},{"label":"Homepage","url":"https://clawhub.ai/teoslayer/skills/pilot-penetration-testing-setup","kind":"homepage"}],"safetyScore":84,"overallRank":62,"popularityScore":60,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"Deploy an automated penetration testing pipeline with 4 agents. Use this skill when: 1. User wants to set up a penetration testing or security assessment pip..."},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-10-12T00:59:23.525Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[],"verifiedCount":0,"selfDeclaredCount":1,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile"}},"adoption":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-12T00:59:23.525Z","emptyReason":null},"stars":null,"forks":null,"downloads":964,"likes":null,"task":null,"library":null,"packageName":null,"latestVersion":"1.0.0","tractionLabel":"964 downloads"},"release":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-12T00:59:23.464Z","emptyReason":null},"lastUpdatedAt":"2026-10-12T00:59:23.525Z","lastCrawledAt":"2026-10-12T00:59:23.464Z","lastIndexedAt":null,"nextCrawlAt":"2026-10-13T00:59:23.464Z","lastVerifiedAt":null,"highlights":[{"version":"1.0.0","createdAt":"2026-04-23T03:40:33.457Z","changelog":"Initial release","fileCount":4,"zipByteSize":6184}]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install s1774mw0xjm94md84a5rvrp9rd84fear:pilot-penetration-testing-setup","setupComplexity":"low","setupSteps":["Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.","Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-12T16:31:19.389Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-teoslayer-pilot-penetration-testing-setup/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"high","updatedAt":"2026-10-12T00:59:23.525Z","emptyReason":null},"readme":"Skill: Pilot Penetration Testing Setup\n\nOwner: teoslayer\n\nSummary: Deploy an automated penetration testing pipeline with 4 agents. Use this skill when: 1. User wants to set up a penetration testing or security assessment pip...\n\nTags: latest:1.0.0\n\nVersion history:\n\nv1.0.0 | 2026-04-23T03:40:33.457Z | user\n\nInitial release\n\nArchive index:\n\nArchive v1.0.0: 4 files, 6184 bytes\n\nFiles: README.md (5054b), skill-card.md (2383b), SKILL.md (8521b), _meta.json (150b)\n\nFile v1.0.0:SKILL.md\n\n---\nname: pilot-penetration-testing-setup\ndescription: >\n  Deploy an automated penetration testing pipeline with 4 agents.\n\n  Use this skill when:\n  1. User wants to set up a penetration testing or security assessment pipeline\n  2. User is configuring an agent as part of a vulnerability scanning workflow\n  3. User asks about recon, vulnerability scanning, exploit validation, or pentest reporting across agents\n\n  Do NOT use this skill when:\n  - User wants to run a single vulnerability scan (use pilot-task-parallel instead)\n  - User wants to send a one-off security alert (use pilot-webhook-bridge instead)\ntags:\n  - pilot-protocol\n  - setup\n  - security\n  - pentest\nlicense: AGPL-3.0\nmetadata:\n  author: vulture-labs\n  version: \"1.0\"\n  openclaw:\n    requires:\n      bins:\n        - pilotctl\n        - clawhub\n    homepage: https://pilotprotocol.network\nallowed-tools:\n  - Bash\n---\n\n# Penetration Testing Setup\n\nDeploy 4 agents that perform recon, scan vulnerabilities, validate exploits, and generate reports.\n\n## Roles\n\n| Role | Hostname | Skills | Purpose |\n|------|----------|--------|---------|\n| recon | `<prefix>-recon` | pilot-discover, pilot-stream-data, pilot-archive | DNS enumeration, port scanning, service fingerprinting |\n| scanner | `<prefix>-scanner` | pilot-task-parallel, pilot-metrics, pilot-dataset | Vulnerability scans, CVE checks, misconfiguration detection |\n| exploiter | `<prefix>-exploiter` | pilot-task-chain, pilot-audit-log, pilot-receipt | Safe proof-of-concept validation, exploitability confirmation |\n| reporter | `<prefix>-reporter` | pilot-webhook-bridge, pilot-share, pilot-slack-bridge | Report generation with findings, risk ratings, remediation |\n\n## Setup Procedure\n\n**Step 1:** Ask the user which role this agent should play and what prefix to use.\n\n**Step 2:** Install the skills for the chosen role:\n```bash\n# For recon:\nclawhub install pilot-discover pilot-stream-data pilot-archive\n# For scanner:\nclawhub install pilot-task-parallel pilot-metrics pilot-dataset\n# For exploiter:\nclawhub install pilot-task-chain pilot-audit-log pilot-receipt\n# For reporter:\nclawhub install pilot-webhook-bridge pilot-share pilot-slack-bridge\n```\n\n**Step 3:** Set the hostname:\n```bash\npilotctl --json set-hostname <prefix>-<role>\n```\n\n**Step 4:** Write the setup manifest:\n```bash\nmkdir -p ~/.pilot/setups\ncat > ~/.pilot/setups/penetration-testing.json << 'MANIFEST'\n<INSERT ROLE MANIFEST FROM BELOW>\nMANIFEST\n```\n\n**Step 5:** Tell the user to initiate handshakes with direct communication peers.\n\n## Manifest Templates Per Role\n\n### recon\n```json\n{\n  \"setup\": \"penetration-testing\", \"setup_name\": \"Penetration Testing\",\n  \"role\": \"recon\", \"role_name\": \"Reconnaissance Agent\",\n  \"hostname\": \"<prefix>-recon\",\n  \"description\": \"Performs passive and active reconnaissance — DNS enumeration, port scanning, service fingerprinting.\",\n  \"skills\": {\n    \"pilot-discover\": \"Enumerate DNS records, subdomains, and service endpoints.\",\n    \"pilot-stream-data\": \"Stream port scan results and fingerprints in real time.\",\n    \"pilot-archive\": \"Archive recon snapshots for baseline comparison.\"\n  },\n  \"peers\": [{\"role\": \"scanner\", \"hostname\": \"<prefix>-scanner\", \"description\": \"Receives recon results for vulnerability scanning\"}],\n  \"data_flows\": [{\"direction\": \"send\", \"peer\": \"<prefix>-scanner\", \"port\": 1002, \"topic\": \"recon-result\", \"description\": \"Recon results with target profile and services\"}],\n  \"handshakes_needed\": [\"<prefix>-scanner\"]\n}\n```\n\n### scanner\n```json\n{\n  \"setup\": \"penetration-testing\", \"setup_name\": \"Penetration Testing\",\n  \"role\": \"scanner\", \"role_name\": \"Vulnerability Scanner\",\n  \"hostname\": \"<prefix>-scanner\",\n  \"description\": \"Runs automated vulnerability scans, checks CVE databases, identifies misconfigurations.\",\n  \"skills\": {\n    \"pilot-task-parallel\": \"Run multiple scan tools in parallel across target services.\",\n    \"pilot-metrics\": \"Track scan coverage, finding counts, and severity distribution.\",\n    \"pilot-dataset\": \"Store CVE matches and vulnerability metadata.\"\n  },\n  \"peers\": [{\"role\": \"recon\", \"hostname\": \"<prefix>-recon\", \"description\": \"Sends recon results\"}, {\"role\": \"exploiter\", \"hostname\": \"<prefix>-exploiter\", \"description\": \"Receives vulnerability findings\"}],\n  \"data_flows\": [\n    {\"direction\": \"receive\", \"peer\": \"<prefix>-recon\", \"port\": 1002, \"topic\": \"recon-result\", \"description\": \"Recon results with target profile and services\"},\n    {\"direction\": \"send\", \"peer\": \"<prefix>-exploiter\", \"port\": 1002, \"topic\": \"vulnerability\", \"description\": \"Vulnerability findings with CVE and severity\"}\n  ],\n  \"handshakes_needed\": [\"<prefix>-recon\", \"<prefix>-exploiter\"]\n}\n```\n\n### exploiter\n```json\n{\n  \"setup\": \"penetration-testing\", \"setup_name\": \"Penetration Testing\",\n  \"role\": \"exploiter\", \"role_name\": \"Exploit Validator\",\n  \"hostname\": \"<prefix>-exploiter\",\n  \"description\": \"Validates discovered vulnerabilities with safe proof-of-concept tests, confirms exploitability.\",\n  \"skills\": {\n    \"pilot-task-chain\": \"Chain validation steps: verify, exploit, document evidence.\",\n    \"pilot-audit-log\": \"Log all validation attempts with timestamps and results.\",\n    \"pilot-receipt\": \"Confirm receipt of vulnerability findings from scanner.\"\n  },\n  \"peers\": [{\"role\": \"scanner\", \"hostname\": \"<prefix>-scanner\", \"description\": \"Sends vulnerability findings\"}, {\"role\": \"reporter\", \"hostname\": \"<prefix>-reporter\", \"description\": \"Receives validated findings\"}],\n  \"data_flows\": [\n    {\"direction\": \"receive\", \"peer\": \"<prefix>-scanner\", \"port\": 1002, \"topic\": \"vulnerability\", \"description\": \"Vulnerability findings with CVE and severity\"},\n    {\"direction\": \"send\", \"peer\": \"<prefix>-reporter\", \"port\": 1002, \"topic\": \"validated-finding\", \"description\": \"Validated findings with proof-of-concept evidence\"}\n  ],\n  \"handshakes_needed\": [\"<prefix>-scanner\", \"<prefix>-reporter\"]\n}\n```\n\n### reporter\n```json\n{\n  \"setup\": \"penetration-testing\", \"setup_name\": \"Penetration Testing\",\n  \"role\": \"reporter\", \"role_name\": \"Pentest Reporter\",\n  \"hostname\": \"<prefix>-reporter\",\n  \"description\": \"Generates pentest reports with findings, risk ratings, remediation steps, and executive summary.\",\n  \"skills\": {\n    \"pilot-webhook-bridge\": \"Deliver reports to client portals and ticketing systems.\",\n    \"pilot-share\": \"Share report drafts with stakeholders for review.\",\n    \"pilot-slack-bridge\": \"Notify security team of completed assessments.\"\n  },\n  \"peers\": [{\"role\": \"exploiter\", \"hostname\": \"<prefix>-exploiter\", \"description\": \"Sends validated findings with evidence\"}],\n  \"data_flows\": [\n    {\"direction\": \"receive\", \"peer\": \"<prefix>-exploiter\", \"port\": 1002, \"topic\": \"validated-finding\", \"description\": \"Validated findings with proof-of-concept evidence\"},\n    {\"direction\": \"send\", \"peer\": \"external\", \"port\": 443, \"topic\": \"pentest-report\", \"description\": \"Pentest report via webhook and Slack\"}\n  ],\n  \"handshakes_needed\": [\"<prefix>-exploiter\"]\n}\n```\n\n## Data Flows\n\n- `recon -> scanner` : recon-result events (port 1002)\n- `scanner -> exploiter` : vulnerability events (port 1002)\n- `exploiter -> reporter` : validated-finding events (port 1002)\n- `reporter -> external` : pentest-report via webhook (port 443)\n\n## Handshakes\n\n```bash\n# recon <-> scanner:\npilotctl --json handshake <prefix>-scanner \"setup: penetration-testing\"\npilotctl --json handshake <prefix>-recon \"setup: penetration-testing\"\n# scanner <-> exploiter:\npilotctl --json handshake <prefix>-exploiter \"setup: penetration-testing\"\npilotctl --json handshake <prefix>-scanner \"setup: penetration-testing\"\n# exploiter <-> reporter:\npilotctl --json handshake <prefix>-reporter \"setup: penetration-testing\"\npilotctl --json handshake <prefix>-exploiter \"setup: penetration-testing\"\n```\n\n## Workflow Example\n\n```bash\n# On scanner — subscribe to recon results:\npilotctl --json subscribe <prefix>-recon recon-result\n# On exploiter — subscribe to vulnerabilities:\npilotctl --json subscribe <prefix>-scanner vulnerability\n# On reporter — subscribe to validated findings:\npilotctl --json subscribe <prefix>-exploiter validated-finding\n# On recon — publish a recon result:\npilotctl --json publish <prefix>-scanner recon-result '{\"target\":\"app.example.com\",\"open_ports\":[22,80,443,8080]}'\n# On exploiter — publish a validated finding:\npilotctl --json publish <prefix>-reporter validated-finding '{\"cve\":\"CVE-2023-46589\",\"validated\":true,\"impact\":\"RCE\"}'\n```\n\n## Dependencies\n\nRequires `pilot-protocol` skill, `pilotctl` binary, `clawhub` binary, and a running daemon.\n\nFile v1.0.0:README.md\n\n# Penetration Testing\n\nDeploy an automated penetration testing pipeline with 4 agents that perform reconnaissance, scan for vulnerabilities, validate exploitability with safe proof-of-concept tests, and generate comprehensive pentest reports. Each agent handles a stage of the assessment -- recon, scanning, validation, and reporting -- so security assessments are methodical, thorough, and well-documented.\n\n**Difficulty:** Advanced | **Agents:** 4\n\n## Roles\n\n### recon (Reconnaissance Agent)\nPerforms passive and active reconnaissance -- DNS enumeration, port scanning, service fingerprinting. Builds a target profile with attack surface mapping.\n\n**Skills:** pilot-discover, pilot-stream-data, pilot-archive\n\n### scanner (Vulnerability Scanner)\nRuns automated vulnerability scans, checks CVE databases, identifies misconfigurations. Prioritizes findings by CVSS score and exploitability.\n\n**Skills:** pilot-task-parallel, pilot-metrics, pilot-dataset\n\n### exploiter (Exploit Validator)\nValidates discovered vulnerabilities with safe proof-of-concept tests, confirms exploitability. Documents evidence and impact without causing damage.\n\n**Skills:** pilot-task-chain, pilot-audit-log, pilot-receipt\n\n### reporter (Pentest Reporter)\nGenerates penetration test reports with findings, risk ratings, remediation steps, and executive summary. Delivers to stakeholders via Slack and webhooks.\n\n**Skills:** pilot-webhook-bridge, pilot-share, pilot-slack-bridge\n\n## Data Flow\n\n```\nrecon    --> scanner  : Recon results with target profile and services (port 1002)\nscanner  --> exploiter: Vulnerability findings with CVE and severity (port 1002)\nexploiter--> reporter : Validated findings with proof-of-concept evidence (port 1002)\nreporter --> external : Pentest report via webhook and Slack (port 443)\n```\n\n## Setup\n\nReplace `<your-prefix>` with a unique name for your deployment (e.g. `acme`).\n\n### 1. Install skills on each server\n\n```bash\n# On server 1 (reconnaissance agent)\nclawhub install pilot-discover pilot-stream-data pilot-archive\npilotctl set-hostname <your-prefix>-recon\n\n# On server 2 (vulnerability scanner)\nclawhub install pilot-task-parallel pilot-metrics pilot-dataset\npilotctl set-hostname <your-prefix>-scanner\n\n# On server 3 (exploit validator)\nclawhub install pilot-task-chain pilot-audit-log pilot-receipt\npilotctl set-hostname <your-prefix>-exploiter\n\n# On server 4 (pentest reporter)\nclawhub install pilot-webhook-bridge pilot-share pilot-slack-bridge\npilotctl set-hostname <your-prefix>-reporter\n```\n\n### 2. Establish trust\n\nAgents are private by default. Each pair that communicates must exchange handshakes. When both sides send a handshake, trust is auto-approved -- no manual step needed.\n\n```bash\n# On recon:\npilotctl handshake <your-prefix>-scanner \"setup: penetration-testing\"\n# On scanner:\npilotctl handshake <your-prefix>-recon \"setup: penetration-testing\"\n# On scanner:\npilotctl handshake <your-prefix>-exploiter \"setup: penetration-testing\"\n# On exploiter:\npilotctl handshake <your-prefix>-scanner \"setup: penetration-testing\"\n# On exploiter:\npilotctl handshake <your-prefix>-reporter \"setup: penetration-testing\"\n# On reporter:\npilotctl handshake <your-prefix>-exploiter \"setup: penetration-testing\"\n```\n\n### 3. Verify\n\n```bash\npilotctl trust\n```\n\n## Try It\n\nAfter setup is complete, run these commands to see data flowing between your agents:\n\n```bash\n# On <your-prefix>-scanner — subscribe to recon results from recon:\npilotctl subscribe <your-prefix>-recon recon-result\n\n# On <your-prefix>-exploiter — subscribe to vulnerabilities from scanner:\npilotctl subscribe <your-prefix>-scanner vulnerability\n\n# On <your-prefix>-reporter — subscribe to validated findings from exploiter:\npilotctl subscribe <your-prefix>-exploiter validated-finding\n\n# On <your-prefix>-recon — publish a recon result:\npilotctl publish <your-prefix>-scanner recon-result '{\"target\":\"app.example.com\",\"dns\":[\"192.168.1.10\"],\"open_ports\":[22,80,443,8080],\"services\":{\"22\":\"OpenSSH 8.9\",\"80\":\"nginx 1.24\",\"8080\":\"Apache Tomcat 9.0.65\"},\"os\":\"Ubuntu 22.04\"}'\n\n# On <your-prefix>-scanner — publish a vulnerability:\npilotctl publish <your-prefix>-exploiter vulnerability '{\"target\":\"app.example.com\",\"port\":8080,\"cve\":\"CVE-2023-46589\",\"service\":\"Apache Tomcat 9.0.65\",\"severity\":\"critical\",\"cvss\":9.8,\"description\":\"Request smuggling via malformed HTTP/2 frames\"}'\n\n# On <your-prefix>-exploiter — publish a validated finding:\npilotctl publish <your-prefix>-reporter validated-finding '{\"target\":\"app.example.com\",\"cve\":\"CVE-2023-46589\",\"validated\":true,\"impact\":\"Remote code execution possible\",\"evidence\":\"HTTP/2 smuggling confirmed with crafted HEADERS frame\",\"remediation\":\"Upgrade Tomcat to 9.0.84+\"}'\n\n# On <your-prefix>-reporter — forward pentest report:\npilotctl publish <your-prefix>-reporter pentest-report '{\"target\":\"app.example.com\",\"findings_total\":12,\"critical\":1,\"high\":3,\"medium\":5,\"low\":3,\"executive_summary\":\"Critical RCE vulnerability found in Tomcat\",\"report_url\":\"https://reports.example.com/pentest-2026-042\"}'\n```\n\nFile v1.0.0:_meta.json\n\n{\n  \"ownerId\": \"kn7b7ecgny18169gnmmnxx76ns80py0g\",\n  \"slug\": \"pilot-penetration-testing-setup\",\n  \"version\": \"1.0.0\",\n  \"publishedAt\": 1776915633457\n}\n\nFile v1.0.0:skill-card.md\n\n## Description:\n\nDeploy an automated penetration testing pipeline with 4 agents.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[teoslayer](https://clawhub.ai/user/teoslayer)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nSecurity engineers and developers use this skill to configure a four-agent penetration testing workflow for authorized reconnaissance, vulnerability scanning, exploit validation, and reporting.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: The setup is intended for penetration testing and could be misused outside an authorized assessment.\n\nMitigation: Use it only for approved security assessments with defined targets, scope, and authorization.\n\nRisk: The setup installs dependency skills without pinned versions.\n\nMitigation: Pin and verify dependency skills before installation.\n\nRisk: Prefix and role placeholders can lead to unsafe or unintended shell and hostname values.\n\nMitigation: Restrict prefix and role values to reviewed, known-safe names before running setup commands.\n\nRisk: Reports may contain sensitive penetration test findings and can be sent to Slack or webhook destinations.\n\nMitigation: Review report content and send it only to approved Slack or webhook destinations.\n\nRisk: Peer handshakes can establish trust between the wrong agents if identities are not checked.\n\nMitigation: Verify peer identities before handshakes and remove ~/.pilot/setups/penetration-testing.json when the deployment is no longer needed.\n\n## Reference(s):\n\n- [ClawHub skill page](https://clawhub.ai/teoslayer/skills/pilot-penetration-testing-setup)\n- [Pilot Protocol homepage](https://pilotprotocol.network)\n\n## Skill Output:\n\n**Output Type(s):** [Guidance, Shell commands, Configuration, Markdown]\n\n**Output Format:** [Markdown with inline shell commands and JSON configuration templates]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [Produces role-specific setup steps for a four-agent pipeline and a local penetration-testing manifest.]\n\n## Skill Version(s):\n\n1.0.0 (source: server release metadata)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.","readmeExcerpt":"Skill: Pilot Penetration Testing Setup Owner: teoslayer Summary: Deploy an automated penetration testing pipeline with 4 agents. Use this skill when: 1. User wants to set up a penetration testing or security assessment pip... Tags: latest:1.0.0 Version history: v1.0.0 | 2026-04-23T03:40:33.457Z | user Initial release Archive index: Archive v1.0.0: 4 files, 6184 bytes Files: README.md (5054b), skill-card.md (2383b), S","codeSnippets":[],"executableExamples":[{"language":"bash","snippet":"# For recon:\nclawhub install pilot-discover pilot-stream-data pilot-archive\n# For scanner:\nclawhub install pilot-task-parallel pilot-metrics pilot-dataset\n# For exploiter:\nclawhub install pilot-task-chain pilot-audit-log pilot-receipt\n# For reporter:\nclawhub install pilot-webhook-bridge pilot-share pilot-slack-bridge"},{"language":"bash","snippet":"pilotctl --json set-hostname <prefix>-<role>"},{"language":"bash","snippet":"mkdir -p ~/.pilot/setups\ncat > ~/.pilot/setups/penetration-testing.json << 'MANIFEST'\n<INSERT ROLE MANIFEST FROM BELOW>\nMANIFEST"},{"language":"json","snippet":"{\n  \"setup\": \"penetration-testing\", \"setup_name\": \"Penetration Testing\",\n  \"role\": \"recon\", \"role_name\": \"Reconnaissance Agent\",\n  \"hostname\": \"<prefix>-recon\",\n  \"description\": \"Performs passive and active reconnaissance — DNS enumeration, port scanning, service fingerprinting.\",\n  \"skills\": {\n    \"pilot-discover\": \"Enumerate DNS records, subdomains, and service endpoints.\",\n    \"pilot-stream-data\": \"Stream port scan results and fingerprints in real time.\",\n    \"pilot-archive\": \"Archive recon snapshots for baseline comparison.\"\n  },\n  \"peers\": [{\"role\": \"scanner\", \"hostname\": \"<prefix>-scanner\", \"description\": \"Receives recon results for vulnerability scanning\"}],\n  \"data_flows\": [{\"direction\": \"send\", \"peer\": \"<prefix>-scanner\", \"port\": 1002, \"topic\": \"recon-result\", \"description\": \"Recon results with target profile and services\"}],\n  \"handshakes_needed\": [\"<prefix>-scanner\"]\n}"},{"language":"json","snippet":"{\n  \"setup\": \"penetration-testing\", \"setup_name\": \"Penetration Testing\",\n  \"role\": \"scanner\", \"role_name\": \"Vulnerability Scanner\",\n  \"hostname\": \"<prefix>-scanner\",\n  \"description\": \"Runs automated vulnerability scans, checks CVE databases, identifies misconfigurations.\",\n  \"skills\": {\n    \"pilot-task-parallel\": \"Run multiple scan tools in parallel across target services.\",\n    \"pilot-metrics\": \"Track scan coverage, finding counts, and severity distribution.\",\n    \"pilot-dataset\": \"Store CVE matches and vulnerability metadata.\"\n  },\n  \"peers\": [{\"role\": \"recon\", \"hostname\": \"<prefix>-recon\", \"description\": \"Sends recon results\"}, {\"role\": \"exploiter\", \"hostname\": \"<prefix>-exploiter\", \"description\": \"Receives vulnerability findings\"}],\n  \"data_flows\": [\n    {\"direction\": \"receive\", \"peer\": \"<prefix>-recon\", \"port\": 1002, \"topic\": \"recon-result\", \"description\": \"Recon results with target profile and services\"},\n    {\"direction\": \"send\", \"peer\": \"<prefix>-exploiter\", \"port\": 1002, \"topic\": \"vulnerability\", \"description\": \"Vulnerability findings with CVE and severity\"}\n  ],\n  \"handshakes_needed\": [\"<prefix>-recon\", \"<prefix>-exploiter\"]\n}"},{"language":"json","snippet":"{\n  \"setup\": \"penetration-testing\", \"setup_name\": \"Penetration Testing\",\n  \"role\": \"exploiter\", \"role_name\": \"Exploit Validator\",\n  \"hostname\": \"<prefix>-exploiter\",\n  \"description\": \"Validates discovered vulnerabilities with safe proof-of-concept tests, confirms exploitability.\",\n  \"skills\": {\n    \"pilot-task-chain\": \"Chain validation steps: verify, exploit, document evidence.\",\n    \"pilot-audit-log\": \"Log all validation attempts with timestamps and results.\",\n    \"pilot-receipt\": \"Confirm receipt of vulnerability findings from scanner.\"\n  },\n  \"peers\": [{\"role\": \"scanner\", \"hostname\": \"<prefix>-scanner\", \"description\": \"Sends vulnerability findings\"}, {\"role\": \"reporter\", \"hostname\": \"<prefix>-reporter\", \"description\": \"Receives validated findings\"}],\n  \"data_flows\": [\n    {\"direction\": \"receive\", \"peer\": \"<prefix>-scanner\", \"port\": 1002, \"topic\": \"vulnerability\", \"description\": \"Vulnerability findings with CVE and severity\"},\n    {\"direction\": \"send\", \"peer\": \"<prefix>-reporter\", \"port\": 1002, \"topic\": \"validated-finding\", \"description\": \"Validated findings with proof-of-concept evidence\"}\n  ],\n  \"handshakes_needed\": [\"<prefix>-scanner\", \"<prefix>-reporter\"]\n}"}],"parameters":null,"dependencies":[],"permissions":[],"extractedFiles":[{"path":"SKILL.md","content":"---\nname: pilot-penetration-testing-setup\ndescription: >\n  Deploy an automated penetration testing pipeline with 4 agents.\n\n  Use this skill when:\n  1. User wants to set up a penetration testing or security assessment pipeline\n  2. User is configuring an agent as part of a vulnerability scanning workflow\n  3. User asks about recon, vulnerability scanning, exploit validation, or pentest reporting across agents\n\n  Do NOT use this skill when:\n  - User wants to run a single vulnerability scan (use pilot-task-parallel instead)\n  - User wants to send a one-off security alert (use pilot-webhook-bridge instead)\ntags:\n  - pilot-protocol\n  - setup\n  - security\n  - pentest\nlicense: AGPL-3.0\nmetadata:\n  author: vulture-labs\n  version: \"1.0\"\n  openclaw:\n    requires:\n      bins:\n        - pilotctl\n        - clawhub\n    homepage: https://pilotprotocol.network\nallowed-tools:\n  - Bash\n---\n\n# Penetration Testing Setup\n\nDeploy 4 agents that perform recon, scan vulnerabilities, validate exploits, and generate reports.\n\n## Roles\n\n| Role | Hostname | Skills | Purpose |\n|------|----------|--------|---------|\n| recon | `<prefix>-recon` | pilot-discover, pilot-stream-data, pilot-archive | DNS enumeration, port scanning, service fingerprinting |\n| scanner | `<prefix>-scanner` | pilot-task-parallel, pilot-metrics, pilot-dataset | Vulnerability scans, CVE checks, misconfiguration detection |\n| exploiter | `<prefix>-exploiter` | pilot-task-chain, pilot-audit-log, pilot-receipt | Safe proof-of-concept validation, exploitability confirmation |\n| reporter | `<prefix>-reporter` | pilot-webhook-bridge, pilot-share, pilot-slack-bridge | Report generation with findings, risk ratings, remediation |\n\n## Setup Procedure\n\n**Step 1:** Ask the user which role this agent should play and what prefix to use.\n\n**Step 2:** Install the skills for the chosen role:\n```bash\n# For recon:\nclawhub install pilot-discover pilot-stream-data pilot-archive\n# For scanner:\nclawhub install pilot-task-parallel pilot-metrics pilot-dataset\n# For exploiter:\nclawhub install pilot-task-chain pilot-audit-log pilot-receipt\n# For reporter:\nclawhub install pilot-webhook-bridge pilot-share pilot-slack-bridge\n```\n\n**Step 3:** Set the hostname:\n```bash\npilotctl --json set-hostname <prefix>-<role>\n```\n\n**Step 4:** Write the setup manifest:\n```bash\nmkdir -p ~/.pilot/setups\ncat > ~/.pilot/setups/penetration-testing.json << 'MANIFEST'\n<INSERT ROLE MANIFEST FROM BELOW>\nMANIFEST\n```\n\n**Step 5:** Tell the user to initiate handshakes with direct communication peers.\n\n## Manifest Templates Per Role\n\n### recon\n```json\n{\n  \"setup\": \"penetration-testing\", \"setup_name\": \"Penetration Testing\",\n  \"role\": \"recon\", \"role_name\": \"Reconnaissance Agent\",\n  \"hostname\": \"<prefix>-recon\",\n  \"description\": \"Performs passive and active reconnaissance — DNS enumeration, port scanning, service fingerprinting.\",\n  \"skills\": {\n    \"pilot-discover\": \"Enumerate DNS records, subdomains, and service endpoints.\",\n    \"pilot-stream-data\": \"Stream port s"},{"path":"README.md","content":"# Penetration Testing\n\nDeploy an automated penetration testing pipeline with 4 agents that perform reconnaissance, scan for vulnerabilities, validate exploitability with safe proof-of-concept tests, and generate comprehensive pentest reports. Each agent handles a stage of the assessment -- recon, scanning, validation, and reporting -- so security assessments are methodical, thorough, and well-documented.\n\n**Difficulty:** Advanced | **Agents:** 4\n\n## Roles\n\n### recon (Reconnaissance Agent)\nPerforms passive and active reconnaissance -- DNS enumeration, port scanning, service fingerprinting. Builds a target profile with attack surface mapping.\n\n**Skills:** pilot-discover, pilot-stream-data, pilot-archive\n\n### scanner (Vulnerability Scanner)\nRuns automated vulnerability scans, checks CVE databases, identifies misconfigurations. Prioritizes findings by CVSS score and exploitability.\n\n**Skills:** pilot-task-parallel, pilot-metrics, pilot-dataset\n\n### exploiter (Exploit Validator)\nValidates discovered vulnerabilities with safe proof-of-concept tests, confirms exploitability. Documents evidence and impact without causing damage.\n\n**Skills:** pilot-task-chain, pilot-audit-log, pilot-receipt\n\n### reporter (Pentest Reporter)\nGenerates penetration test reports with findings, risk ratings, remediation steps, and executive summary. Delivers to stakeholders via Slack and webhooks.\n\n**Skills:** pilot-webhook-bridge, pilot-share, pilot-slack-bridge\n\n## Data Flow\n\n```\nrecon    --> scanner  : Recon results with target profile and services (port 1002)\nscanner  --> exploiter: Vulnerability findings with CVE and severity (port 1002)\nexploiter--> reporter : Validated findings with proof-of-concept evidence (port 1002)\nreporter --> external : Pentest report via webhook and Slack (port 443)\n```\n\n## Setup\n\nReplace `<your-prefix>` with a unique name for your deployment (e.g. `acme`).\n\n### 1. Install skills on each server\n\n```bash\n# On server 1 (reconnaissance agent)\nclawhub install pilot-discover pilot-stream-data pilot-archive\npilotctl set-hostname <your-prefix>-recon\n\n# On server 2 (vulnerability scanner)\nclawhub install pilot-task-parallel pilot-metrics pilot-dataset\npilotctl set-hostname <your-prefix>-scanner\n\n# On server 3 (exploit validator)\nclawhub install pilot-task-chain pilot-audit-log pilot-receipt\npilotctl set-hostname <your-prefix>-exploiter\n\n# On server 4 (pentest reporter)\nclawhub install pilot-webhook-bridge pilot-share pilot-slack-bridge\npilotctl set-hostname <your-prefix>-reporter\n```\n\n### 2. Establish trust\n\nAgents are private by default. Each pair that communicates must exchange handshakes. When both sides send a handshake, trust is auto-approved -- no manual step needed.\n\n```bash\n# On recon:\npilotctl handshake <your-prefix>-scanner \"setup: penetration-testing\"\n# On scanner:\npilotctl handshake <your-prefix>-recon \"setup: penetration-testing\"\n# On scanner:\npilotctl handshake <your-prefix>-exploiter \"setup: penetration-testing\"\n# On exploiter:\npilotctl ha"},{"path":"_meta.json","content":"{\n  \"ownerId\": \"kn7b7ecgny18169gnmmnxx76ns80py0g\",\n  \"slug\": \"pilot-penetration-testing-setup\",\n  \"version\": \"1.0.0\",\n  \"publishedAt\": 1776915633457\n}"},{"path":"skill-card.md","content":"## Description:\n\nDeploy an automated penetration testing pipeline with 4 agents.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[teoslayer](https://clawhub.ai/user/teoslayer)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nSecurity engineers and developers use this skill to configure a four-agent penetration testing workflow for authorized reconnaissance, vulnerability scanning, exploit validation, and reporting.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: The setup is intended for penetration testing and could be misused outside an authorized assessment.\n\nMitigation: Use it only for approved security assessments with defined targets, scope, and authorization.\n\nRisk: The setup installs dependency skills without pinned versions.\n\nMitigation: Pin and verify dependency skills before installation.\n\nRisk: Prefix and role placeholders can lead to unsafe or unintended shell and hostname values.\n\nMitigation: Restrict prefix and role values to reviewed, known-safe names before running setup commands.\n\nRisk: Reports may contain sensitive penetration test findings and can be sent to Slack or webhook destinations.\n\nMitigation: Review report content and send it only to approved Slack or webhook destinations.\n\nRisk: Peer handshakes can establish trust between the wrong agents if identities are not checked.\n\nMitigation: Verify peer identities before handshakes and remove ~/.pilot/setups/penetration-testing.json when the deployment is no longer needed.\n\n## Reference(s):\n\n- [ClawHub skill page](https://clawhub.ai/teoslayer/skills/pilot-penetration-testing-setup)\n- [Pilot Protocol homepage](https://pilotprotocol.network)\n\n## Skill Output:\n\n**Output Type(s):** [Guidance, Shell commands, Configuration, Markdown]\n\n**Output Format:** [Markdown with inline shell commands and JSON configuration templates]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [Produces role-specific setup steps for a four-agent pipeline and a local penetration-testing manifest.]\n\n## Skill Version(s):\n\n1.0.0 (source: server release metadata)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment."}],"languages":[],"docsSourceLabel":"CLAWHUB","editorialOverview":"Deploy an automated penetration testing pipeline with 4 agents. Use this skill when: 1. User wants to set up a penetration testing or security assessment pip... Skill: Pilot Penetration Testing Setup Owner: teoslayer Summary: Deploy an automated penetration testing pipeline with 4 agents. Use this skill when: 1. User wants to set up a penetration testing or security assessment pip... Tags: latest:1.0.0 Version history: v1.0.0 | 2026-04-23T03:40:33.457Z | user Initial release Archive index: Archive v1.0.0: 4 files, 6184 bytes Files: README.md (5054b), skill-card.md (2383b), S","editorialQuality":{"score":100,"threshold":65,"status":"ready","wordCount":1115,"uniquenessScore":46,"reasons":[]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-10-12T00:59:23.525Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-10-12T00:59:23.525Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-12T16:31:19.390Z","emptyReason":null},"items":[{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-10-09T19:11:12.944Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}