Skip to content
Security
Skill

/campaign-health

Health check for the bb/pt/ctf workflow driver subsystem - verifies everything is in place so every machine runs the same. Checks vault-content consistency (scripts present, JSON valid, routing wired, all 69 tool pages carry phase:, the tool index resolves, the hook edits are in

BOOST
From plugin
torch
33356 skills
Install
$ npx -y skills add Encod3d-Sec/TORCH --skill campaign-health --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.
  • Slash command/campaign-health

Context preview

The summary Claude sees to decide when to auto-load this skill.

Health check for the bb/pt/ctf workflow driver subsystem - verifies everything is in place so every machine runs the same. Checks vault-content consistency (scripts present, JSON valid, routing wired, all 69 tool pages carry phase:, the tool index resolves, the hook edits are in

SKILL.md

campaign-health.SKILL.md
name: campaign-health
description: Health check for the bb/pt/ctf workflow driver subsystem - verifies everything is in place so every machine runs the same. Checks vault-content consistency (scripts present, JSON valid, routing wired, all 69 tool pages carry phase:, the tool index resolves, the hook edits are in place) AND per-machine wiring (the three workflow skills symlinked, hooks registered, imports work), then runs a live init->board->next smoke test. Use when setting up the workflow on a new machine, after a vault sync, when the driver misbehaves, or on "bb-health", "campaign health", "is the workflow set up", "check hooks and scripts", "why is the board not working".

campaign-health

The vault syncs across machines; `~/.claude` (hook registration, skill symlinks, deps) does **not**. So "it works here" does not mean "it works there". This skill confirms both halves before you rely on `bb-workflow` / `pt-workflow` / `ctf-workflow` on this machine.

Run it

python3 scripts/campaign-doctor.py            # summary (only WARN/FAIL shown)
python3 scripts/campaign-doctor.py --verbose   # every check

Exit 0 = all green. Exit 1 = at least one FAIL; the driver will not run correctly here until fixed.

What it checks

  • **A. vault content** - the driver's scripts exist, every campaign JSON is valid, each type's

`approach` exists in `playbook.json` and `coverage-classes.json`, the two hook edits (recon-capture emits `spec['tools']`, tool-telemetry logs binaries) are present, all 69 `wiki/tools/` pages carry `phase:`, and `campaign.tool_index()` resolves an invocation for every tool.

  • **B. machine wiring** - the three workflow skills are authored and symlinked into `~/.claude/skills`,

hooks are registered (via `check-hooks.py`), and `_engagement` imports.

  • **C. live smoke test** - `init -> board -> next` against a throwaway copy of the fixture, asserting

the board writes rows and `next` withholds the exploit at G1.

Fixing what it reports

  • **WARN (machine wiring)** - usually one setup script the doctor names:

`bash setup/install-skills.sh` (skills) or `bash setup/install-hooks.sh` (hooks).

  • **FAIL (vault content)** - a stale sync or a partial edit. Re-pull the vault; if a tool page lost

its `phase:`, re-run `python3 scripts/tool-phase-backfill.py --write`.

Run this first on any new machine, and after every vault sync, so all machines run the same driver.

Read more
Ships withtorch

An AI-powered penetration testing and bug-bounty knowledge base and automation harness for Claude Code.

Get the whole plugin

Other skills on torch.

hunt-burp
Skill

hunt-burp

Drive Burp Suite over its MCP server as an AI triage + attack layer - review proxy history for signals, replay via Repeater/send,…

hunt-ad
Skill

hunt-ad

Active Directory attack hunting - enumeration to domain dominance. Spray-safe (lockout gate), AS-REP/Kerberoast, ACL + ADCS…

hunt-api
Skill

hunt-api

API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection +…