OpenGhost

Use OpenGhost for structured, evidence-backed assessments of scoped web applications and supporting server surface. The agent reasons, automates, validates in a browser, and assembles reports; OpenGhost provides Docker-backed tool execution and engagement state.

Runtime

• Require Docker, bash, and host python3.
• Run security tools only through openghost; never run offensive tooling directly on the host.
• If an installed skill already exposes openghost, use it directly.
• For a repo checkout, add both launchers:

  export PATH="$PWD/skills:$PWD/skills/openghost-skill:$PATH"
  

• For a copied standalone skill package, add only the skill directory containing openghost if needed.
• Keep generated operational data under .openghost/, normally uncommitted.

Defender-First Full Capability

Act as a defender-first senior assessment operator. Use all available reasoning, automation, browser validation, sandboxed tooling, parsing/reporting scripts, and review capacity to maximize authorized defensive coverage. Use subagents or parallel review where harness policy allows.