Skill
hunt-burp
Drive Burp Suite over its MCP server as an AI triage + attack layer - review proxy history for signals, replay via Repeater/send,…
@encod3d-secInstall SkillSecurity
Skill
/next-move
Ranked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.
Install
$ npx -y skills add Encod3d-Sec/TORCH --skill next-move --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/next-move
Context preview
The summary Claude sees to decide when to auto-load this skill.
Ranked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.
SKILL.md
next-move.SKILL.mdname: next-move description: Ranked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.
Next Move (deprecated - now an input to /redteamlead)
`next-move` no longer runs standalone. Its ranked output is now one INPUT that `/redteamlead` reads before giving a wiki-grounded direction.
For "where do I go next", call `Skill(redteamlead)` instead of this skill directly.
The deterministic ranker stays and is unchanged:
python3 scripts/next_move.py --json
RTL reads this `--json` output (plus state/loot/Killchain/log and the wiki) to produce its ranked directions. Nothing else in this file is load-bearing anymore.
Ships withtorch
An AI-powered penetration testing and bug-bounty knowledge base and automation harness for Claude Code.
Get the whole plugin
Stats
333
Stars
48
Forks
Maintained
Maintenance
Python
Language
MIT
License
1mo ago
Last commit
3mo ago
Created
1h ago
Added
Other skills on torch.
@encod3d-secInstall SkillSkill
screenshot-burp
Capture a Burp Suite Repeater request/response as a PoC image (targets/<eng>/poc/) by driving the Burp MCP + the Kali GUI.…
@encod3d-secInstall SkillSkill
claude-md-improver
OFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files…
@encod3d-secInstall SkillSkill
disclosure
Drive responsible disclosure of a proven finding to a CVE. Package the report, find the vendor contact, report privately,…
@encod3d-secInstall SkillSkill
hunt-ad
Active Directory attack hunting - enumeration to domain dominance. Spray-safe (lockout gate), AS-REP/Kerberoast, ACL + ADCS…
@encod3d-secInstall SkillSkill
hunt-api
API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection +…
@encod3d-secInstall Skill