Engagement Scope

Use this skill as the first stop for scoped cyber workflows. Define what is authorized, what is in scope, what level of impact is acceptable, and which specialized skill should carry the work forward.

Scope Workflow

1. Identify the requested security activity.
2. Determine whether the target, authorization context, and boundaries are already clear from the conversation, local workspace, or provided materials.
3. If the user names a public bounty or vulnerability disclosure program, collect current scope evidence from official sources before assuming coverage.
4. Ask only for missing information that changes whether work can proceed safely or changes the technical approach.
5. Produce a short engagement brief before handing off to a specialized skill.
6. Re-check scope before any step that would materially increase impact, touch live external systems, attempt exploitation, collect sensitive data, or alter target state.

Authorization Check

Proceed when there is a clear authorized context, such as: