Security Skills Framework (SSF) — HunterX v6.0.0

Security Skills Framework (SSF)

HunterX v6.0.0 — Architecture, Components, and SDK

Table of Contents

1. Overview
2. Architecture
3. Core Components
   • Base Skill (base.py)
   • Skill Registry (registry.py)
   • Skill Loader (loader.py)
   • Skill Metadata (metadata.py)
   • Skill Capability (capability.py)
   • Skill Executor (executor.py)
   • Skill Planner (planner.py)
   • Skill Validator (validator.py)
   • Skill Context (context.py)
   • Skill Result (result.py)
   • Skill Policy (policy.py)
   • Skill Cache (cache.py)
   • Skill Telemetry (telemetry.py)
   • Skill Marketplace (marketplace.py)
4. Built-in Default Skills
5. CLI Reference
6. REST API Reference
7. SDK — Creating a Custom Skill

Overview

The Security Skills Framework (SSF) is the modular skill execution engine powering HunterX v6.0.0. All components are implemented under core/skills/. The framework provides a pluggable architecture for security assessment capabilities — from reconnaissance and analysis to exploitation and reporting — governed by a safety policy system, telemetry, caching, and a full lifecycle management layer.

Architecture

core/skills/
  base.py          — Abstract base class for all skills
  registry.py      — Central singleton registry
  loader.py        — Skill discovery and loading
  metadata.py      — Skill metadata model
  capability.py    — Capability enum (45 values)
  executor.py      — Central execution engine
  planner.py       — Goal/objective-based skill planning
  validator.py     — Safety and result validation
  context.py       — Runtime execution context
  result.py        — Standardized skill result model
  policy.py        — Safety policies (5 levels)
  cache.py         — Result caching (SHA256, LRU, TTL)
  telemetry.py     — Per-skill execution telemetry
  marketplace.py   — Install/export/verify skill packages
  plugins/         — 41 built-in default skills

Core Components

1. base.py — SecuritySkill

Abstract class that every skill must implement.

Abstract / Overridable Methods

SkillState Enum

2. registry.py — SkillRegistry

Singleton that maintains the global catalog of registered skills.

3. loader.py — SkillLoader

Discovers and loads skill definitions from disk.

4. metadata.py — SkillMetadata

Data model describing a skill’s identity, constraints, and security posture.

5. capability.py — SkillCapability

Enumeration of 45 capability values organized into categories.

Categories

Full list of 45 values: TECHNOLOGY_DETECTION, HTTP_ANALYSIS, TLS_ANALYSIS, COOKIE_ANALYSIS, AUTH_ANALYSIS, JWT_ANALYSIS, OAUTH_ANALYSIS, CORS_ANALYSIS, CSP_ANALYSIS, CSRF, CLICKJACKING, OPEN_REDIRECT, DIRECTORY_ENUMERATION, FILE_UPLOAD, LFI, RFI, SSRF, XXE, SSTI, SQL_INJECTION, NOSQL_INJECTION, COMMAND_INJECTION, PATH_TRAVERSAL, DESERIALIZATION, GRAPHQL, WEBSOCKET, REST_API, OPENAPI, GRPC, DNS_INTELLIGENCE, SUBDOMAIN_ENUMERATION, WAF_FINGERPRINTING, FINGERPRINT_CORRELATION, SECRETS_DETECTION, CLOUD_METADATA, S3, AZURE_BLOB, GCP_STORAGE, KUBERNETES, DOCKER, CI_CD_SECRETS

6. executor.py — SkillExecutor

Central execution engine responsible for running skills with caching, telemetry, and concurrency controls.

7. planner.py — SkillPlanner

Recommends and sequences skills based on goals or objectives.

Uses a keyword-to-capability mapping to match natural-language objectives to skill capabilities.

8. validator.py — SkillValidator

Multi-layered validation for targets, policies, results, evidence, and safety.

9. context.py — SkillContext

Rich runtime context provided to every skill during execution.

10. result.py — SkillResult

Standardized output model for all skill executions.

11. policy.py — SkillPolicy & SafetyLevel

Five safety levels governing skill behavior and constraints.

SafetyLevel

Per-Level Configuration

Each level defines:

12. cache.py — SkillCache

Result cache to avoid redundant skill executions.

13. telemetry.py — SkillTelemetry

Tracks per-skill execution statistics.

14. marketplace.py — SkillMarketplace

Manages the lifecycle of skill packages (install, uninstall, verify, export).

Uses a SQLite index to track installed skills and their metadata.

Built-in Default Skills

All 41 built-in skills reside in core/skills/plugins/ and are discovered by SkillLoader.discover_builtin().

CLI Reference

All skill management commands are under the hunterx skills namespace.

REST API Reference

SDK — Creating a Custom Skill

Skills are implemented by subclassing SecuritySkill and implementing the required abstract methods. Below is a minimal template.

from core.skills.base import SecuritySkill
from core.skills.metadata import SkillMetadata, RiskLevel, NoiseLevel
from core.skills.capability import SkillCapability


class MySkill(SecuritySkill):
    @property
    def metadata(self) -> SkillMetadata:
        return SkillMetadata(
            skill_id="my_skill",
            name="My Custom Skill",
            description="Does something useful",
            version="1.0.0",
            risk_level=RiskLevel.LOW,
            noise_level=NoiseLevel.LOW,
        )

    @property
    def capabilities(self) -> list[SkillCapability]:
        return [SkillCapability.HTTP_ANALYSIS]

    async def execute(self, context, params=None):
        # Implementation goes here
        return self._success("Done", confidence=0.9)

Key points

• metadata property — must return a fully populated SkillMetadata instance.
• capabilities property — must return a list of SkillCapability values the skill provides.
• execute method — receives a SkillContext and optional parameters; returns a SkillResult.
• Helper methods (_success, _fail, _error) on SecuritySkill simplify result construction.
• Skills can override initialize, validate, verify, cleanup, and other lifecycle methods as needed.