Individual skill

coordination

Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.

skills/coordination/SKILL.md

Read pinned source

Source commit 95fdc128af4ca1ae16b3226f9430f1bad97b0656

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: No
Repository scan complete: No
Skill scan complete: No
Observed behavior: Not checked yet
Last checked: Nov 5, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 610
Repository last updated: Jul 29, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

bounty-hunters Repository topic
hackerone Repository topic
pentest Repository topic
pentest-tool Repository topic
security Repository topic
security-research Repository topic
security-tools Repository topic
security Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 7,262 bytes
SKILL.mdcore · 7,262 bytes
SKILL.mdcore · 7,262 bytes
SKILL.mdcore · 7,262 bytes
SKILL.mdcore · 7,262 bytes
reference/ATTACK_INDEX.mddoc · 17,544 bytes
reference/GIT_CONVENTIONS.mddoc · 481 bytes
reference/OUTPUT_STRUCTURE.mddoc · 1,014 bytes
reference/PATT_STANDARD.mddoc · 1,983 bytes
reference/VALIDATION.mddoc · 17,281 bytes
reference/bookkeeping.mddoc · 3,857 bytes
reference/context-injection.mddoc · 3,253 bytes
reference/coordinator.mddoc · 4,680 bytes
reference/coverage-matrix.jsonasset · 22,675 bytes
reference/coverage-matrix.mddoc · 14,430 bytes
reference/creative-research.mddoc · 5,236 bytes
reference/credential-loading.mddoc · 2,118 bytes
reference/executor-role.mddoc · 3,973 bytes
reference/orchestrator.mddoc · 4,047 bytes
reference/output-discipline.mddoc · 6,374 bytes
reference/preflight-checklist.mddoc · 6,755 bytes
reference/principles.mddoc · 7,642 bytes
reference/role-matrix.mddoc · 4,888 bytes
reference/severity-calibration.mddoc · 5,536 bytes
reference/skeptic-role.mddoc · 2,601 bytes
reference/spawning-recipes.mddoc · 7,482 bytes
reference/validator-role.mddoc · 7,620 bytes

Read excerpt


# Coordination

Runs as a spawned subagent (one per target). Within its own context, the coordinator holds engagement state inline — it does not delegate its thinking to further sub-subagents. Thinks before every action.

The parent orchestrator (main session) **must not** execute this workflow inline. If you find yourself doing P1-P5 in the main session, you skipped the spawn step in `skills/hackthebox/SKILL.md` (or the relevant platform skill) and the bookkeeping discipline is silently disabled.

## Principle (Rule 0)

**Source code first.** Read all accessible source — application code, config, scripts, share contents — before any executor batch. Every answer is in the data you already have. Guessing without reading is the most common failure mode.

## Workflow

```
P0: Ingest scope