pwn 0.5.684 → 0.5.685

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ea35094f56adb31f1af096c634b0a027aa16825fe596ed34165b1efc0627c279
-  data.tar.gz: 42bedb6ce050206f988a3df3d99c84d39896e63ec54d453aa0d625e763600b9e
+  metadata.gz: 4969508ce00cf858c5dfd06506e306f37d86e3d0671f07c3d3c021fa603b49d8
+  data.tar.gz: 6e23201a56add7514b8a12de42ee930aba424e33329bc9c608bd3dc4c2ce0473
 SHA512:
-  metadata.gz: da7066b555f86266d022850351074fd8ce266254e746c80f13a84fd631a71040d7e122c6fb1ccbd9ef5c93225b40c22a99651bfb35a05ae26bd60dd56d0208b7
-  data.tar.gz: de4d5212171f9bb84122a9141203851245a8fa4e4ca01eb127992b9fce505de4aeb15ed7812cd03bc6aaf71248cfa389fdb41ee280460f24ed7f56b8245b1d77
+  metadata.gz: 980664beb783d0a4c4aed5df5548d8f3c839e47afadd566a35f5b3b4413d6242e6c6da54319cacc91ceb7a3f8f5756f8268d29876b6277fdfda2e2f4475a251d
+  data.tar.gz: de6ce8fac7cc8c1dda8989faef831c4c32bf88141d188b113aa16b7b0035f3062505fc4cb843ea2b7f9e179306f66060ab8fbc1e4c8a325169a274f5784ef79f

data/README.md

@@ -182,6 +182,12 @@ $ pwn setup --profile net --dry-run
 Also available as `pwn_setup` (standalone driver) and `pwn --setup[=PROFILE]`.
 The doctor exits non-zero when capabilities are degraded, so CI can gate on it.
 
+First launch seeds bundled operator skills into `~/.pwn/skills/` from
+`etc/default_skills/` when those names are missing (vulnerability research,
+pentest, red team, SAST, RE, hardware, social engineering, and related).
+Existing `SKILL.md` files are never overwritten.
+
+
 <!--[![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)-->
 
 Full page: [Installation](documentation/Installation.md) ·

data/documentation/Agent-Tool-Registry.md

@@ -34,9 +34,7 @@ those without the full learning surface.
 `shell` and `pwn_eval` share `PWN::AI::Agent::ToolGuard`
 (`lib/pwn/ai/agent/tool_guard.rb`) before they run. The guard remaps common
 wrong keys, rejects ellipsis placeholders, refuses bash-only syntax unless
-`ai.agent.shell_bash` is true (default runner is `/bin/sh`), and blocks live
-host-discovery unless the request is in-scope or `ai.agent.recon_authorized`
-is true.
+`ai.agent.shell_bash` is true (default runner is `/bin/sh`).
 
 The `policy` toolset is inspect-only. `policy_stats`, `policy_evaluate`, and
 `policy_recommend` read the live Q / REINFORCE table. Reset is Ruby-only, so a

data/documentation/Configuration.md

@@ -129,7 +129,6 @@ ai:
     auto_extrospect: true          # Ambient baseline after every final answer (host/repo/env ONLY - never launches burpsuite/zaproxy/msf/gqrx). Sense tools stay on-demand.
     defer_introspect: true         # Run auto_introspect on a background thread AFTER the user-visible reply (default on). Specs/cron stay inline.
     prompt_cache: true             # Engine-native prefix cache. Anthropic cache_control, OpenAI prompt_cache_key, Grok x-grok-conv-id, Gemini systemInstruction split. Ollama / Open WebUI have none.
-    recon_authorized: false        # Allow live subnet sweeps / raw-socket discovery tools this session
     shell_bash: false              # true -> run shell via bash -lc. Default is /bin/sh.
     plan_first: ~                  # Plan-then-act pre-pass. nil = auto (true when ai.active is ollama or openwebui).
     tool_router: ~                 # Dynamic tool-set slimming. nil = auto (true for ollama / openwebui).
@@ -313,7 +312,6 @@ PWN::Config.refresh_env
 | `ai.agent.auto_introspect` | Boolean | `true` | `PWN::AI::Agent::Learning.auto_introspect` | Run outcome logging + lesson mining after every final answer. Toggle live via `learning_auto_introspect_toggle`. |
 | `ai.agent.auto_extrospect` | Boolean | `true` | `PWN::AI::Agent::Extrospection.auto_extrospect` | Ambient baseline after every final answer (`AUTO_SECTIONS` = host/repo/env only; never spawns GUI/JVM tools). Sense tools (`intel`/`verify`/`watch`/`rf_tune`/`observe`) stay on-demand. Toggle live via `extro_auto_toggle`. |
 | `ai.agent.toolsets` | Array\<String\> \| `nil` | `nil` (all) | `bin/pwn`, `PWN::Plugins::REPL`, `PWN::AI::Agent::Registry` | Allow-list of toolsets exposed to the agent. Valid: `cron`, `curriculum`, `extrospection`, `learning`, `memory`, `metrics`, `policy`, `pwn`, `reward`, `sessions`, `skills`, `swarm`, `terminal`. |
-| `ai.agent.recon_authorized` | Boolean | `false` | `PWN::AI::Agent::ToolGuard.recon_authorized?` / `Loop.recon_authorized?` | When true (or the user request contains in-scope / engagement language), live host-discovery tools may run. Default refuses unauthorized sweeps. |
 | `ai.agent.shell_bash` | Boolean | `false` | `PWN::AI::Agent::ToolGuard.shell_bash?` | When true, `shell` runs via `bash -lc` so bash-only syntax is allowed. Default is POSIX `/bin/sh` and bashisms are rejected with a rewrite hint. |
 | `ai.agent.plan_first` | Boolean \| `nil` | `nil` (auto: `true` when `ai.active` is `ollama` or `openwebui`) | `PWN::AI::Agent::Loop.plan_first` | Plan-then-act pre-pass: the model must emit a numbered tool plan (as an assistant message) *before* it may dispatch anything. Cheap chain-of-thought scaffolding for local models. |
 | `ai.agent.tool_router` | Boolean \| `nil` | `nil` (auto: `true` for `ollama` / `openwebui`) | `PWN::AI::Agent::Registry.definitions` | Dynamic tool-set slimming: expose only `Registry::CORE_TOOLS` + the top-K keyword-relevant schemas for *this* request. Ties break on historical `Metrics` success rate, then `ai.agent.tool_preference`. |

data/documentation/Home.md

@@ -37,13 +37,13 @@
 |---|---|
 | [AI / LLM Integration](AI-Integration.md) | OpenAI · Anthropic · Grok (OAuth) · Gemini · Ollama · Open WebUI |
 | [Agent Tool Registry](Agent-Tool-Registry.md) | 13 toolsets · **87** LLM-callable tools |
-| [Memory · Skills · Learning](Skills-Memory-Learning.md) | Introspection - the self-improvement loop |
+| [Memory · Skills · Learning](Skills-Memory-Learning.md) | Introspection - self-improvement loop + 10 bundled skills on first launch |
 | [Mistakes](Mistakes.md) | **Negative feedback** - fingerprint failures · do-NOT-repeat · `[REPEATING]`/`[REGRESSED]` · inline self-correction |
 | [Reinforcement Learning](Reinforcement-Learning.md) | **`Reward` + `Curriculum` + `Policy`** - outcome/process judges · preference ledger · self-play practice · live Q / REINFORCE (advisory) · export-ready LoRA gate |
 | [Extrospection](Extrospection.md) | World-awareness - snapshot · drift · intel · **watch** · **verify** · **rf_tune** · **osint** · serial · telecomm · packet · vision · voice · correlate |
 | [Swarm (Multi-Agent)](Swarm.md) | Personas · ask · debate · broadcast · shared bus |
 | [Sessions](Sessions.md) | Transcript persistence + reflection |
-| [Session Workflow](Session-Workflow.md) | Keywords: `continue` / last session / write-then-read / recon scope |
+| [Session Workflow](Session-Workflow.md) | Keywords: `continue` / last session / write-then-read |
 | [Cron](Cron.md) | Scheduled jobs. Hygiene seeds on; curriculum practice/judge/train ship off |
 
 ## 🧩 Capability Namespaces  (`lib/pwn/*`)

data/documentation/How-PWN-Works.md

@@ -21,7 +21,7 @@ hardware).
 | `pwn --ai PROMPT` | `bin/pwn` | Headless one-shot agent (CI-friendly) |
 | `pwn setup` | `lib/pwn/setup.rb` · `bin/pwn_setup` | Post-install doctor + capability provisioner + `--migrate` state doctor (also `pwn --setup[=PROFILE]`) |
 | `bin/pwn_*` + `pwn` | 54 files | Thin OptionParser wrappers plus the `pwn` REPL / one-shot agent |
-| `PWN::Cron` | `lib/pwn/cron.rb` | Scheduled jobs. Fresh install seeds hygiene on (`learning_consolidate_nightly`, `pwn_stores_lean_nightly`) and curriculum practice/judge/train off |
+| `PWN::Cron` | `lib/pwn/cron.rb` | Scheduled jobs + background worker (`pwn setup`). Fresh install seeds hygiene on (`learning_consolidate_nightly`, `pwn_stores_lean_nightly`) and curriculum practice/judge/train off |
 
 ## L2 - AI agent core (`lib/pwn/ai/agent/`)
 
@@ -46,7 +46,7 @@ call, and [Reinforcement Learning](Reinforcement-Learning.md) for how
 ## L3 - Capability namespaces (`lib/pwn/*`)
 
 `Plugins` (67) · `SAST` (48) · `WWW` (22) · `AWS` (90) · `SDR` · `Blockchain` ·
-`Bounty` · `Reports` · `FFI` · `Banner` · **`Setup`** · **`Migrate`**. Each is
+`Bounty` · `Reports` · `FFI` · `Banner` · **`Setup`** · **`Migrate`**. First launch also seeds bundled skills from `etc/default_skills/`. Each is
 a plain module of `public_class_method def self.x(opts = {})` methods -
 callable the same way from the REPL, from `pwn_eval`, or from a driver.
 

data/documentation/Installation.md

@@ -246,8 +246,24 @@ pwn setup --profile ${PWN_PROFILE:-full} --yes
 ## First-run configuration
 
 The first `pwn` launch creates `~/.pwn/` and an **encrypted**
-`~/.pwn/pwn.yaml` template. Add at least one LLM engine key with the
-`pwn-vault` REPL command to enable `pwn-ai` - see
+`~/.pwn/pwn.yaml` template. It also seeds bundled skills into
+`~/.pwn/skills/` when those names are missing:
+
+- `vulnerability-research-fundamentals`
+- `deep-exploitation`
+- `bug-bounty-hunting`
+- `sast-code-scans`
+- `reverse-engineering-binaries`
+- `penetration-testing`
+- `web-application-penetration-testing`
+- `red-teaming`
+- `hardware-and-firmware-testing`
+- `social-engineering`
+- `osint`
+
+Source lives in the gem at `etc/default_skills/`. `PWN::Config.install_default_skills`
+is idempotent and never overwrites an edited `SKILL.md`. Add at least one
+LLM engine key with the `pwn-vault` REPL command to enable `pwn-ai` - see
 [Configuration](Configuration.md). `pwn setup` will report the AI-engine
 row as `MISSING` until a key is set.
 

data/documentation/Persistence.md

@@ -11,7 +11,7 @@ Every byte PWN remembers between processes lives here.
 | **`.schema`** | **`PWN::Migrate`** | JSON `{schema:,pwn_version:,at:}` | `pwn setup --migrate` | **schema stamp - drives the one-line drift warning on launch** |
 | `memory.json` | `PWN::Memory` | JSON array | `memory_clear` | facts · prefs · lessons · env - injected into every prompt |
 | `memory.idx` | `PWN::MemoryIndex` | JSON `{key → {sha,vec}}` | `PWN::MemoryIndex.reset` | local embedding index over `memory.json` - powers **relevance-ranked** MEMORY injection (incremental; only re-embeds changed entries) |
-| `skills/<name>/SKILL.md` | `PWN::Config.load_skills` | **[agentskills.io](https://agentskills.io) spec** - `name`+`description` YAML front-matter | `skill_delete` | reusable procedures + `metadata.references:` (CWE/CVE/ATT&CK/NIST). Legacy flat `skills/*.md` auto-migrated by `skill_migrate_legacy` / `pwn setup --migrate --fix`. |
+| `skills/<name>/SKILL.md` | `PWN::Config.load_skills` | **[agentskills.io](https://agentskills.io) spec** - `name`+`description` YAML front-matter | `skill_delete` | reusable procedures + `metadata.references:`. Fresh install seeds bundled skills from `etc/default_skills/` via `PWN::Config.install_default_skills` (never overwrites an existing file). Legacy flat `skills/*.md` auto-migrated by `skill_migrate_legacy` / `pwn setup --migrate --fix`. |
 | `learning.jsonl` | `PWN::AI::Agent::Learning` | JSON-per-line | `learning_reset` | task outcome log → success_rate |
 | **`preferences.jsonl`** | **`PWN::AI::Agent::Reward`** | JSON-per-line `{prompt,rejected,chosen,source}` | `rm` | **DPO/KTO/ORPO preference-pair ledger - user_correction · mistakes_resolve · counterfactual · critic · curriculum** |
 | **`mistakes.json`** | **`PWN::AI::Agent::Mistakes`** | **JSON `{sig → entry}`** | **`mistakes_reset`** | **failure fingerprints · cross-session count · fix · `[REPEATING]` · `[REGRESSED]`** |

data/documentation/Session-Workflow.md

@@ -17,7 +17,7 @@ operator cheat sheet.
 3. Everything else is an autonomous goal. `Loop.run` keeps CORE_TOOLS until
    the original request is done or truly blocked.
 4. An unfinished host-work request is written to `~/.pwn/open_goal.json`.
-5. A accepted final answer deletes that file. Budget exhaust leaves it.
+5. An accepted final answer deletes that file. Budget exhaust leaves it.
 
 ```
 you type a line
@@ -28,8 +28,6 @@ you type a line
         |
         +-- last / previous session ---------> prior JSONL, not this line
         |
-        +-- live sweep without scope --------> refuse (syntax only)
-        |
         +-- everything else -----------------> one Loop.run
                                               write? then read it back
                                               listing is not done
@@ -63,7 +61,7 @@ Delete `~/.pwn/open_goal.json` to drop a stuck checkpoint.
 
 ## This session vs last session
 
-Entering `pwn-ai` is a new transcript. “Last session” is the newest other
+Entering `pwn-ai` is a new transcript. "Last session" is the newest other
 `~/.pwn/sessions/*.jsonl`.
 
 | Phrase | Where it reads |
@@ -98,34 +96,16 @@ Whole-line greetings only, so `hi, scan this host` stays a goal:
 | Write / update / regenerate / docs / fix | A **write** effect, then a later **read** (`cat`, `ruby -c`, eval read) |
 | Browser / navigate / `TransparentBrowser` | A **browse** effect (goto / dump_links / close) |
 | Hostname / uname / cwd / whoami | Any live **read** |
-| Other long goals (bounty, recon-in-scope) | **write**, **browse**, or **eval** — `ls` alone is not enough |
+| Other long goals (bounty, scrape, recon) | **write**, **browse**, or **eval** (`ls` alone is not enough) |
 
 These do **not** count as finishing a write: `memory_remember`,
 `learning_note_outcome`, `mistakes_*`, rspec/rubocop green, a README listing,
-or “I will do that next time.”
+or "I will do that next time."
 
 After you mutate a file, read it back before a final.
 
 ---
 
-## Live recon (authorization)
-
-Sweeps (`find live hosts`, `ping sweep`, `scan this subnet`) need scope
-language or `ai.agent.recon_authorized=true`. Otherwise the agent refuses
-the live scan and may still give command syntax.
-
-| In-scope wording that unlocks live recon |
-|---|
-| `in-scope` / `in scope` |
-| `authorized` / `authorised` |
-| `engagement` / `written permission` |
-| `bug bounty` / `bugbounty` |
-| `rules of engagement` / `roe` |
-| `lab only` / `my lab` / `I own this` |
-| `permission to scan` / `scope:…` |
-
----
-
 ## Phrases that are **not** a final answer
 
 Loop keeps calling tools if the model emits any of:
@@ -133,10 +113,10 @@ Loop keeps calling tools if the model emits any of:
 - `shall I` / `should I` / `want me to` / `proceed?` / `continue?`
 - `# Remaining block` / heading-only outlines
 - `were not applied` / `not written to disk` / `next time`
-- narrated next tool (`Wait, let's try…`) with no `tool_calls`
+- narrated next tool (`Wait, let's try...`) with no `tool_calls`
 
 Type `continue` yourself only to resume a **saved** open goal after the REPL
-died. Do not use it as a mid-turn “ok, go on” — the loop should already be
+died. Do not use it as a mid-turn "ok, go on" - the loop should already be
 going.
 
 ---
@@ -145,8 +125,8 @@ going.
 
 | Path | Role |
 |---|---|
-| `~/.pwn/sessions/<id>.jsonl` | This activation’s transcript |
+| `~/.pwn/sessions/<id>.jsonl` | This activation's transcript |
 | `~/.pwn/open_goal.json` | Unfinished host-work request |
-| `~/.pwn/memory.json` | Durable facts (not “last line”) |
+| `~/.pwn/memory.json` | Durable facts (not "last line") |
 
 [← Home](Home.md)

data/documentation/Skills-Memory-Learning.md

@@ -103,6 +103,26 @@ them in-place to the spec-conformant `<name>/SKILL.md` layout with
 back-filled `name`/`description` front-matter. `skill_create` always writes
 the new format.
 
+A fresh install (first `pwn` launch or `pwn setup --migrate`) copies these
+bundled skills into `~/.pwn/skills/` when the name is missing:
+
+| Skill | For |
+|---|---|
+| `vulnerability-research-fundamentals` | First-pass research methodology with PWN plugins |
+| `deep-exploitation` | Crash / primitive to reliable PoC |
+| `bug-bounty-hunting` | Program scope, Burp, authz replay, report |
+| `sast-code-scans` | `PWN::SAST::Factory` / `pwn_sast` + reports |
+| `reverse-engineering-binaries` | checksec, disasm, `PWN::Plugins::Assembly` |
+| `penetration-testing` | PTES / NIST / OSSTMM / ISSAF engagement loop |
+| `web-application-penetration-testing` | OWASP WSTG / ASVS / API Top 10 |
+| `red-teaming` | MITRE ATT&CK, TIBER-EU, Kill Chain |
+| `hardware-and-firmware-testing` | OWASP FSTM / ISTG, serial, firmware |
+| `social-engineering` | OSSTMM human channel, ATT&CK phishing |
+| `osint` | `extro_osint` kinds, feeds, keys, pivots |
+
+Source: `etc/default_skills/` in the gem. Edits in `~/.pwn/skills` are never
+overwritten.
+
 ## Housekeeping
 
 | Tool | When |

data/documentation/Troubleshooting.md

@@ -138,7 +138,7 @@ list, then install equivalents by hand.
 
 **Cause:** older dual-emit paths or `about_to` restating the full goal every batch.
 
-**Current behavior (v0.5.683+):**
+**Current behavior (v0.5.684+):**
 
 1. `Loop.task_summary_about_to!` is the only about_to entry.
 2. `TaskSummarizer.about_to` builds distinct lines with `tool_counts_phrase` + `intent_phrase`.

data/documentation/Why-PWN.md

@@ -33,7 +33,7 @@ critical when the caller is an autonomous agent.
 | "Trust our scanner" | `cat lib/pwn/sast/sql.rb` - read the regex yourself |
 | Per-seat license for the glue | MIT-licensed glue; bring your own Burp Pro / Nessus key |
 | Agent output is a PDF | Agent output is a `PWN::Reports` object *and* a distilled skill *and* a memory entry |
-| One vendor's model | Five interchangeable engines; swarm can pit them against each other |
+| One vendor's model | Six interchangeable engines; swarm can pit them against each other |
 
 ## Why the feedback loop matters
 

data/documentation/diagrams/dot/memory-skills-detailed.dot

@@ -29,7 +29,7 @@ digraph "PWN_MemorySkills" {
     color="#a16207"; bgcolor="#422006";
     Fmem [label="memory.json\nfact · pref · lesson · env", shape=cylinder, fillcolor="#fcd34d"];
     Fidx [label="memory.idx\nembedding index\n(sha → vec)", shape=cylinder, fillcolor="#fcd34d"];
-    Fskl [label="skills/<n>/SKILL.md\nYAML front-matter refs",       shape=cylinder, fillcolor="#fcd34d"];
+    Fskl [label="skills/<n>/SKILL.md\nYAML front-matter + refs\n(+ etc/default_skills seed)", shape=cylinder, fillcolor="#fcd34d"];
     Flrn [label="learning.jsonl\noutcome log",               shape=cylinder, fillcolor="#fcd34d"];
     Fses [label="sessions/*.jsonl\ntranscripts (+ lean)",      shape=cylinder, fillcolor="#fcd34d"];
     Fmis [label="mistakes.json\nsig → count · fix · regressed", shape=cylinder, fillcolor="#fcd34d"];

data/documentation/diagrams/dot/overall-pwn-architecture.dot

@@ -28,7 +28,7 @@ digraph "PWN_Overall_Architecture" {
     REPL  [label="🐚  pwn REPL\nPry + PWN:: preload",       fillcolor="#7dd3fc"];
     PwnAI [label="✨  pwn-ai\nAgent TUI · pwn --ai",         fillcolor="#7dd3fc"];
     CLI   [label="📜  bin/pwn_*\n54 executables",            fillcolor="#7dd3fc"];
-    Cronb [label="⏱  PWN::Cron\nScheduled jobs",            fillcolor="#7dd3fc"];
+    Cronb [label="⏱  PWN::Cron\nJobs + background worker", fillcolor="#7dd3fc"];
   }
   {rank=same; REPL; PwnAI; CLI; Cronb}
 

data/documentation/diagrams/dot/persistence-filesystem.dot

@@ -16,7 +16,7 @@ digraph "PWN_Persistence" {
   schm [label=".schema\n{schema:, pwn_version:, at:}\ndrives launch drift warning"];
   mem  [label="memory.json\nfacts · prefs · lessons · env"];
   midx [label="memory.idx\nlocal embedding index\n(relevance-ranked MEMORY)"];
-  skl  [label="skills/<name>/SKILL.md\nagentskills.io spec\nname+description frontmatter + refs"];
+  skl  [label="skills/<name>/SKILL.md\nagentskills.io + default_skills seed\nname+description frontmatter + refs"];
   lrn  [label="learning.jsonl\ntask outcomes"];
   prf  [label="preferences.jsonl\nDPO/KTO/ORPO pairs\nuser_correction · resolve · counterfactual"];
   mis  [label="mistakes.json\nfailure fingerprints · fixes\n[REPEATING] · [REGRESSED]"];

data/documentation/diagrams/dot/sessions-cron-automation.dot

@@ -25,7 +25,7 @@ digraph "PWN_SessionsCron" {
     label="Later / Elsewhere"; fontcolor="#ddd6fe"; style=rounded;
     color="#6d28d9"; bgcolor="#2e1065";
     Reflect [label="learning_reflect\n(session_id)",   fillcolor="#c4b5fd"];
-    Fire    [label="crontab → PWN::Cron.run",           fillcolor="#c4b5fd"];
+    Fire    [label="worker / crontab\n→ PWN::Cron.run", fillcolor="#c4b5fd"];
     Resume  [label="agent_debate\n(swarm_id: ...)",     fillcolor="#c4b5fd"];
   }
   {rank=same; Reflect; Fire; Resume}