Pentest C2 Operator

Set up authorized C2 simulation workflows and measure defensive detection outcomes.

This skill appears to do what it says: it validates scope/authorization, and generates local report artifacts. Before installing or running it: (1) review the autonomous-pentester/shared/pentest_common module the script imports (that code will determine what I/O or network actions actually occur); (2) make sure you have written authorization for any live tests and prefer --dry-run until you've audited dependencies; (3) confirm the tool will not invoke external C2 frameworks or download payloads in your environment unless you explicitly enable that behavior; and (4) run in an isolated/test environment first if you're unsure.

Type: OpenClaw Skill Name: pentest-c2-operator Version: 0.1.0 The skill bundle is designed for 'C2 simulation workflows' and 'security testing' but explicitly implements robust safeguards. The `SKILL.md` and `scripts/c2_operator.py` enforce strict scope validation and require explicit `--i-have-authorization` for any non-dry-run execution. Crucially, the `c2_operator.py` script does not execute actual C2 tools; instead, it generates *placeholder* reports and artifacts, simulating the *reporting* aspect of a C2 operation. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The listed C2 tools in `references/tools.md` are for informational context, not for execution by this skill.