engage.actions
CommandExecute Phase 7 - Actions on Objectives and Goal Achievement
Calibrate model verdict trust (Wilson-bounded miss-rate) to short-circuit re-validation
> /plugin marketplace add hypnguyen1209/offensive-claude> /plugin install offensive-claude@offensive-claude-marketplace
description: Calibrate model verdict trust (Wilson-bounded miss-rate) to short-circuit re-validation
Tracks how often a model's verdicts (finding-validator / finding-checker PASS/KILL/DOWNGRADE) were later overturned, and decides — fail-closed — when a (model, decision_class) cell is trustworthy enough to skip an expensive re-validation in the autopilot loop. Backed by `engine/model_scorecard.py`.
`/engage.scorecard {record|rate|trusted|stats} ...`
1. **Record outcomes** as you confirm them: `model_scorecard.py record --model opus --class finding-validator:PASS --outcome correct|overturned` (a "miss" = a verdict later overturned: a PASS that was a false positive, a KILL that was real). 2. **Consult before skipping a re-check** (autopilot): `model_scorecard.py trusted --model opus --class finding-validator:PASS` → exit 0 trusted, 3 not. A cell is trusted ONLY when the Wilson 95% **upper** bound on its miss-rate ≤ 5% **and** there are enough samples (≈73+ clean) — fail-closed: a new/rarely-seen model or one recent miss is NOT trusted, so the autopilot keeps re-validating. 3. **Review** — `model_scorecard.py stats` shows per-(model, class) n / overturned / upper-bound / trusted.
untrusted cell simply gets the normal finding-validator + finding-checker treatment.
A spec-driven offensive security framework for Claude Code — structured engagement workflows based on the Cyber Kill Chain, 32 kill-chain skills (multi-file progressive-disclosure) plus a discipline layer (a SessionStart dispatcher + 6 process/discipline
Execute Phase 7 - Actions on Objectives and Goal Achievement
Execute Phase 6 - Command and Control Infrastructure Setup
Crash → root cause → reachability → empirical exploitability verdict (native bugs)
Find the canonical fix commit(s) for a CVE across sources, then diff for root cause
Execute Phase 4 - Exploitation and Access Establishment
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
Check text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…