# My Skill

> One line on what this playbook does, then a "Use when ..." clause so the agent knows when to load it (e.g. "Use when the target exposes X / you see Y in requests"). Max 1024 chars. This description is the ONLY thing the model sees until it loads the skill — make the trigger conditions explicit, since there is no separate `triggers` list.

- Skill: `pentesterflow/my-skill` (Agent Skill)
- Install (CLI): `npx skillmds@latest add pentesterflow/my-skill`
- Raw SKILL.md: https://api.skillmd.com/api/skills/pentesterflow/my-skill/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: pentesterflow (https://skillmd.com/u/pentesterflow)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/pentesterflow/my-skill

---


# my-skill playbook

State the goal in one or two sentences — what the operator is trying to
achieve — and the scope rules (authorized targets only).

## 1. First step

Concrete, copy-pasteable commands. Default to curl + the `http` tool; only
reach for specialised scanners when the user asks.

```sh
curl -ksS "https://TARGET/..."
```

Reference bundled files (e.g. a wordlist under `payloads/`) with
`read_payloads(skill="my-skill", file="list.txt")`, or shell scripts via the
`${SKILL_DIR}` placeholder:

```sh
${SKILL_DIR}/scripts/check.sh https://TARGET
```

## 2. Next step

...

## Reporting

What proves the bug, the concrete impact in one sentence, and remediation.
When you have a reproduced finding with a real request/response, call
`confirm_finding`.