Extract DPAPI-protected secrets such as credentials and browser data offline and online.
日本語の概要は準備中です。原文の説明を表示しています。
Standard Operating Procedures and router for MCP task triage, subagent selection, and orchestration.
インストールする前に、エージェントに与えられる指示の中身を確認できます。
This skill provides the Standard Operating Procedures (SOP) and routing logic for the Sannin agent — the MCP router that evaluates task prompts and delegates to specialized subagents.
In the 8-phase Konoha workflow, Sannin serves a dual role:
sannin which reads delegate.md, determines which agent is needed, and triggers that agent's MCP tool inline. This routing happens at every phase boundary.document completes, the orchestrator dispatches Kage for a blocking review of every persisted task and validation artifact. Only an explicit Kage approval with minimum 97% confidence across all verification categories (Minimum Required: ≥ 97%) permits Sannin to synthesize the phase outputs into final_report.md and advance to done. If confidence is < 97% or validation fails, Sannin MUST NOT deliver the result to the user, but instead re-delegates the tasks with Kage's remediation notes.tests/). Never create duplicate test folders. Upon Kage approval, all temporary debug and scratch scripts must be cleaned up before concluding the workflow.The Konoha maintenance workflow uses six sequential steps:
Structured delegation is the primary path. Legacy task artifacts remain a compatibility fallback.
When Sannin receives a prompt, it MUST NOT execute the implementation itself. Instead, it MUST orchestrate the workflow by delegating to the appropriate subagents via their Konoha MCP tools (e.g. kage, jonin, anbu, chunin, tokubetsu-jonin, genin). Sannin waits for each agent to report back before proceeding to the next step.
Before entering any pipeline branch, you MUST classify the user's request to determine the correct workflow:
Website Build Detection — triggers BRANCH B if the prompt contains ANY combination of:
Classification rules (in priority order):
build_from_sourcebuild_from_text⚠️ CRITICAL: If classified as BRANCH B, you MUST jump directly to the BRANCH B section below. Do NOT enter BRANCH A steps (Chunin, Genin, Kage). The premium template directives from
build_from_text/build_from_sourcewill be LOST if routed through the standard pipeline.
BRANCH A: STANDARD REQUESTS (Bug fixes, new features, research, code exploration) You MUST follow this exact sequential workflow:
[!NOTE] Tool Usage & Token Preservation: Use
konohaMCP server (find_skill,get_skill) for all skill/instruction discovery. Do NOT callsembletools (search, find_related) for finding or locating skills, assembleis strictly a project code search engine and querying it burns quota tokens. Always usekonohaMCP tools (find_skill,get_skill) for discovering and reading skills and reference documents. NEVER usesemblesearch for skills.
Load the specific reference file using konoha.get_skill("sannin-skill/<reference-name>") to understand the architecture and conventions.
| If the task involves... | Route to |
|---|---|
| Codebase exploration, tracing code paths | @genin |
| Architecture decisions, security audits | @kage |
| Web research, documentation lookup | @chunin |
| UI/frontend development, building websites, e-commerce, Next.js/Svelte UIs | @jonin (load jonin-skill & use pnpm) |
| Backend, bug fixing, DevOps, penetration testing in dev/local environments | @anbu |
| Technical writing, documentation | @tokubetsu-jonin |
delegate.md targeting the chosen subagent.konoha MCP read_file_head/read_file_range if prompt.md exists).delegate.md.konoha.build_from_text (or konoha.build_from_source for mockups) first.jonin-skill in required skills and mandate pnpm (never npm or standalone npx) in delegate.md.@jonin.delegate.md, inspect the target workspace for project-local knowledge files (README.md, docs/, CONTRIBUTING.md, .cursorrules, .clauderules, and project-local skills in .agents/skills, .cursor/skills, skills/, .skills/, docs/skills/).delegate.md under Project Context & Guidelines and instruct the assigned subagent to strictly enforce project-specific conventions.まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Extract DPAPI-protected secrets such as credentials and browser data offline and online.
日本語の概要は準備中です。原文の説明を表示しています。
Audit, detect, and remediate Shadow Credentials misconfigurations on msDS-KeyCredentialLink in Active Directory. Focuses on access-controls, monitoring Event ID 5136, and credential-management hygiene.
日本語の概要は準備中です。原文の説明を表示しています。
Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.
日本語の概要は準備中です。原文の説明を表示しています。
Create forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity through hash verification.
日本語の概要は準備中です。原文の説明を表示しています。
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
日本語の概要は準備中です。原文の説明を表示しています。
Perform static analysis of Android APK malware samples using apktool for decompilation, jadx for Java source recovery, and androguard for permission analysis, manifest inspection, and suspicious API call detection.
日本語の概要は準備中です。原文の説明を表示しています。