Kage — pentest sandbox

When to use this skill

• kage <target> — black-box engagement
• pentest <target> / security audit on <target> — same as above
• kage audit <local path> — white-box source audit only
• kage greybox <target> <source-path> — black-box + source context

<target> can be a domain, URL, wildcard (*.example.com), or a local source path. In greybox mode, Turn 0 runs the bundled audit-context-building methodology on the source first, then feeds trust-boundary and auth-flow context into Turns 2–3.

Container model