Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Infrastructure — measured AI agent skill | DecimalAI

transilienceai/infrastructure

NewSkillScoreMaintained

Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.

Securityby transilienceai

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Security & AppSec pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/transilienceai-infrastructure/SKILL.md

decimalai skills pull transilienceai-infrastructure --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/transilienceai-infrastructure/SKILL.md https://app.decimal.ai/s/transilienceai-infrastructure/SKILL.md

Raw file: /s/transilienceai-infrastructure/SKILL.md ↗ · machine-readable summary at /s/transilienceai-infrastructure.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

23 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 10h ago

Yes — +9% lift+17% tokens0% turns83% of whole cases pass with skill (19/23)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-19	✗→✓	▲ Improved	-63%	0%
case-20	✗→✓	▲ Improved	-47%	0%
case-02	✓→✓	＝ Same ✓	73%	0%
case-03	✓→✓	＝ Same ✓	78%	0%
case-04	✓→✓	＝ Same ✓	7%	0%

Showing 5 of 23 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

transilienceai / communitytools

skills/infrastructure/SKILL.md

View on GitHub ↗

License MITImported 8/3/2026Version v1

Skill contents

SKILL.md

Infrastructure

Test network infrastructure for vulnerabilities including network services, protocols, and perimeter security.

Techniques

| Type | Key Vectors | |------|-------------| | Port Scanning | SYN scan, UDP scan, service detection, OS fingerprinting | | DNS | Zone transfers, cache poisoning, subdomain takeover, DNS rebinding | | MITM | ARP spoofing, DNS spoofing, SSL stripping, LLMNR/NBT-NS poisoning | | VLAN Hopping | Switch spoofing, double tagging | | IPv6 | RA flooding, neighbor spoofing, tunneling attacks | | SMB/NetBIOS | Null sessions, relay attacks, enumeration | | Sniffing | Packet capture, credential harvesting, protocol analysis | | DoS | Resource exhaustion, amplification, application-layer | | ICS/SCADA | Modbus TCP, PLC exploitation, coil/register manipulation, session hijacking | | Space / CCSDS | Satellite telecommand framing (Space Packet + TC Transfer Frame), APID/SCID/VCID routing, VCFC sequencing, CRC-16/CCITT, ASCII 0x%02x: command counters | | UPnP / IoT / CPE | rootDesc/SCPD enumeration, vendor SOAP info disclosure (GetPassword), command injection via vendor actions, cross-action auth-key reuse | | Hardware / Embedded | Logic captures (Saleae .sal), CAN/UART decoding, side-channel password recovery, legacy CPU errata, i386 tools via docker |

Workflow

Network discovery and topology mapping
Port scanning and service enumeration
Protocol-specific vulnerability testing
Network attack execution (authorized scope only)
Evidence capture with packet captures and logs

Reference

Quickstart guides (per attack type):

reference/port-scanning-quickstart.md - Port scanning and service discovery
reference/dns-quickstart.md - DNS attacks and enumeration
reference/mitm-quickstart.md - Man-in-the-middle attacks
reference/vlan-hopping-quickstart.md - VLAN hopping techniques
reference/ipv6-quickstart.md - IPv6 attack vectors
reference/smb-netbios-quickstart.md - SMB/NetBIOS exploitation
reference/sniffing-quickstart.md - Network sniffing and capture
reference/dos-quickstart.md - DoS assessment
reference/ics-modbus-quickstart.md - ICS/SCADA Modbus PLC exploitation
reference/ccsds-space-telecommand-quickstart.md - Satellite CCSDS telecommand frame crafting (Space Packet + TC Transfer Frame)
reference/upnp-iot-quickstart.md - UPnP / IoT / CPE firmware web UI enumeration and exploitation
reference/hardware-embedded-quickstart.md - Logic captures, CAN/UART decoding, side-channel char-by-char recovery, legacy CPU bugs (6502), i386 tooling on ARM macOS

Scan techniques: reference/syn-scan.md, reference/udp-scan.md, reference/icmp-scan.md, reference/os-fingerprint.md Other: reference/firewall-detection.md, reference/service-enum.md, reference/ip-reputation.md, reference/overview.md

Want to see if transilienceai/infrastructure would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.