# srt agents

> **Read this file only.** Do not fetch `openapi.json`, `llms-full.txt`, or crawl the site.

## Bootstrap

https://sddd.mom/.well-known/agent-skills/pentest-ai/skills/bootstrap/SKILL.md

Tree: https://sddd.mom/.well-known/agent-skills/pentest-ai/README.md

## Load model

1. `pentest-ai/core/reasoning_rules.md`
2. One workflow in `pentest-ai/workflows/`
3. Only the files that workflow lists (one vuln class or one service)

## Map

| Intent | Path |
| --- | --- |
| Auth | `pentest-ai/skills/auth/` |
| Search | `pentest-ai/skills/search/` |
| MCP | `pentest-ai/skills/mcp/` |
| Export hosts | `pentest-ai/skills/export/` |
| SSH/RDP/Redis/leaks/… | `pentest-ai/knowledge/network_security/services/<name>/` |
| SQLi/XSS/SSRF/… | `pentest-ai/knowledge/web_security/<class>/` |
| Web review | `pentest-ai/workflows/web_application_review.yaml` |
| Network review | `pentest-ai/workflows/network_assessment.yaml` |
| Report | `pentest-ai/skills/report_generation/` |
| CVE chain | `pentest-ai/skills/cve_exploit_chain/` |
| OWASP | `pentest-ai/knowledge/owasp_cheatsheets/RULES.md` then `INDEX.md` |
| 0day search | `pentest-ai/knowledge/0day_research/RULES.md` then `INDEX.md` |

## Endpoints

- API: `https://api.sddd.mom` + `X-API-Key`
- CVE: `https://cve.sddd.mom/api/v1/cves`
- Exploits: `https://exp.sddd.mom/api/v1/exploits`