Unlimited Attack Scope
Pushes the agent to search, verify, chain and log penetration-testing findings across every security domain without stopping early.
- Repository
- AIPentest/CyberStrikeAI
- Stars
- 8,323
- Licence
- Apache-2.0
- Files
- 1 file
What it does
This is a short instruction file that tells an AI agent to treat its penetration-testing work as having no fixed boundaries: search widely, verify findings rather than assuming them, combine small weaknesses into bigger breakthroughs, record negative results too, and switch approaches when blocked. It is written in Chinese with English keywords and mainly acts as a reminder of mindset and scope rather than adding specific tools or steps.
Great for
- Security testers who already run authorised penetration tests and want an agent to think more broadly about attack paths
- Red team members exploring multi-domain targets such as web, mobile, cloud, and wireless systems
- Researchers studying how prompt-based agent instructions shape offensive security behaviour
Skip it if
- Anyone without written authorisation to test the target: the file explicitly encourages unlimited exploration and chaining, which could cause unlawful intrusion or damage if misused
- Beginners looking for a step-by-step guide, since the file gives principles rather than procedures or tools
- Non-security tasks, where the content has no practical relevance
Try asking
- “Remind me that this engagement's scope covers web, APK and cloud, and chain any weak findings into a bigger path”
- “When my first exploit is blocked, suggest alternative routes and keep a log of what did not work”
- “Verify each suspected vulnerability before reporting it, and record negative results as facts”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.
unlimited-attack-scope.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip unlimited-attack-scope.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip unlimited-attack-scope.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Always state the authorised scope and rules of engagement explicitly alongside this skill, since the file itself sets no limits
- Pair it with more specific skills for particular domains so the agent has concrete methods to follow
- Review the agent's actions and logs, because the instruction to never give up can lead to aggressive behaviour
What's inside
- SKILL.md
Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.