Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
Automate repetitive workflows and reduce manual effort
Example: Generate reports, summarize documents, draft communications
Save 3-5 hours per week on routine tasks
Learn new skills, understand complex topics, get expert guidance
Example: Explain concepts, provide examples, suggest learning resources
Accelerate learning and skill development by 2x
Enhance output quality through reviews, suggestions, and refinements
Example: Review drafts, suggest improvements, catch errors
Improve work quality by 30-40% with less effort
Time estimate: 15-45 minutes depending on use case complexity
Prerequisites
Submit your Claude Code skill and start earning
epx add zhaoxuya520/reverse-skill/skills/ot-icsCompatible with
Supported agents
| name | ot-ics |
| description | Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation. |
NOW: 读取 ../field-journal/precedent-pentest.md — 工控环境误操作可致物理危害NOW: 书面授权必须写清：站点、网段、是否允许主动扫描/写寄存器NOW: case-init；默认 passive-first；ready_for_act 前禁止对 PLC 写操作NEXT: tool-index；多数工控工具需手动与隔离实验网ACT: 资产与分区识别 → 暴露面 → 只读验证MUST NOT 在未明确允许时：
- 对 PLC 写线圈/寄存器
- 全网高速率扫描生产 OT
- 中断安全仪表系统（SIS）相关路径
优先：只读识别、流量镜像、离线固件/配置分析
□ Purdue L0–L5 草图：现场设备 → 控制 → 监督 → 站点 DMZ → 企业
□ 资产清单：PLC/RTU/HMI/工程师站/历史库/Jump host
□ 协议与端口基线（仅授权网段）
□ SPAN/镜像 PCAP → protocol-reverse / Wireshark 工控解析器
□ 配置与工程文件离线审计（TIA/RSLogix 导出等）
□ 默认口令与明文协议（Modbus 无认证）记录为 Finding，不写盘改值
□ 低速识别，维护窗口
□ 只读功能码优先
□ 每步 Evidence；异常立即停止并通报
□ 控制器固件版本 → CVE 映射（不盲刷固件）
□ 联合 firmware-pentest 做离线镜像分析
| 工具 | 用途 | 注意 |
|---|---|---|
| Wireshark 工控 dissectors | 被动解析 | 镜像流量 |
| Nmap NSE（受限） | 识别 | 速率与时间窗 |
| Claroty/Nozomi 等 | 资产发现 | 商业/现场 |
| PLC 厂商工程软件 | 配置审计 | 离线优先 |
| binwalk / Ghidra | 固件 | 离线 |
references/ot-safe-assessment.md../firmware-pentest/ ../protocol-reverse/ ../network via pentest-tools上游: MASTER R28
下游: 固件深挖 firmware-pentest；协议 protocol-reverse；IT 横向 windows-ad/attack-chain
同级: 不要用普通 Web 扫默认参数打 OT
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versionot-icsExecute the skills CLI command in your project's root directory to begin installation:
epx add zhaoxuya520/reverse-skill/skills/ot-icsFetches ot-ics from zhaoxuya520/reverse-skill and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/ot-ics
Restart Cursor to activate ot-ics. Access via /ot-icsin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use when skill capabilities match your task, clear ROI on time saved, and you can validate outputs. Best for repetitive tasks, learning, and quality improvement.
✗ Avoid when
Avoid when task requires deep expertise you can't validate, involves sensitive decisions, or when learning process is more valuable than speed of completion.
dotnet-reverse
zhaoxuya520/reverse-skill · security · same repo
go-rust-reverse
zhaoxuya520/reverse-skill · security · same repo
browser-extension-reverse
zhaoxuya520/reverse-skill · security · same repo
protocol-reverse
zhaoxuya520/reverse-skill · security · same repo
js-reverse
zhaoxuya520/reverse-skill · security · same repo
thick-client
zhaoxuya520/reverse-skill · security · same repo
Keeps context tight: ot-ics is the kind of skill you can hand to a new teammate without a long onboarding doc.
We added ot-ics from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
ot-ics has been reliable in day-to-day use. Documentation quality is above average for community skills.
ot-ics reduced setup friction for our internal harness; good balance of opinion and flexibility.
ot-ics has been reliable in day-to-day use. Documentation quality is above average for community skills.
Solid pick for teams standardizing on skills: ot-ics is focused, and the summary matches what you get after install.
Registry listing for ot-ics matched our evaluation — installs cleanly and behaves as described in the markdown.
Solid pick for teams standardizing on skills: ot-ics is focused, and the summary matches what you get after install.
We added ot-ics from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
Keeps context tight: ot-ics is the kind of skill you can hand to a new teammate without a long onboarding doc.
showing 1-10 of 26