ENKO

Agent Skill

Dalfox ships a SKILL.md that teaches any skill-aware agent how to drive Dalfox correctly: authorization gate first, MCP over CLI, preflight before heavy scans, V > A > R finding prioritization. Point your agent at it and the model stops guessing flags.

The file lives at skills/dalfox/SKILL.md in the repository, so once you've cloned Dalfox you already have it locally. It is a bundle, not a single file: SKILL.md holds the workflows and points the agent at a references/ directory for lookup material — cli.md (flags and safe combinations), mcp.md (the six tool schemas and validation rules), results.md (finding axes, output formats, error and exit codes), config.md, server-and-payload.md, advanced.md (WAF, mining, raw-http/HAR recipes), and an INDEX.md map.

Install with npx skills

The easiest way is the open agent-skills CLI:

# Install to the current project (committed, shared with the team)
npx skills add hahwul/dalfox

# Or install globally (~/<agent>/skills/, available everywhere)
npx skills add hahwul/dalfox -g

The CLI auto-detects which agents you use (Claude Code, Cursor, Codex, OpenCode, and dozens of others) and links the skill for each. Pick a specific agent if you only want one:

# Only Claude Code
npx skills add hahwul/dalfox -a claude-code

# Non-interactive (CI-friendly)
npx skills add hahwul/dalfox -g -a claude-code -y

To update later:

npx skills update dalfox

To remove:

npx skills remove dalfox

Install manually

If you prefer not to run npx, fetch the skill into the location your agent expects. For Claude Code that's ~/.claude/skills/dalfox/. Fetch the references/ files along with SKILL.md, since the skill sends the agent to them:

BASE=https://raw.githubusercontent.com/hahwul/dalfox/main/skills/dalfox
mkdir -p ~/.claude/skills/dalfox/references
curl -o ~/.claude/skills/dalfox/SKILL.md "$BASE/SKILL.md"
for f in INDEX cli mcp results config server-and-payload advanced; do
  curl -o ~/.claude/skills/dalfox/references/$f.md "$BASE/references/$f.md"
done

From a clone, cp -r skills/dalfox ~/.claude/skills/ does the same.

Other clients read from their own skills directory; see your agent's docs for the exact path.

What the skill covers

  • Trigger conditions: fires when the user asks to scan a URL for XSS, enumerate reflected parameters, or mentions "dalfox" explicitly. Skips non-XSS vulnerabilities.
  • Authorization gate: unless the target is an obvious test lab, the skill refuses to scan until the user confirms they're authorized to send payloads to it.
  • Mode detection: prefers MCP tools when available, falls back to the dalfox CLI, and tells the user how to install if neither is present.
  • MCP playbook: preflight_dalfox → scan_with_dalfox → poll get_results_dalfox (honoring suggested_poll_interval_ms) → delete_scan_dalfox only when settled: true. After cancellation, retry deletion if the worker is still draining. Includes the validated input bounds (timeout 1–299 s, delay 0–9999 ms) so the agent doesn't send values Dalfox will reject.
  • CLI scenarios: POST bodies, authenticated sessions, proxy-through-Burp, blind XSS (your own callback URL, or a Dalfox-managed OAST session with --blind-oob), stored XSS, target lists, captured requests (raw-http / HAR), fast smoke tests, and maximum-coverage runs.
  • Result interpretation: the three separate axes — type (the claim: V asserted vulnerable > A AST-detected > R reflected-only > I informational), detection_method (how it was found), and severity (impact, today derived from the tier) — plus the confidence / confidence_reason grade behind the claim. The agent leads with the strongest claims and never describes V as observed browser execution. See Detection Model.
  • Failure modes: why reachable: false, a CONNECTION_FAILED or SESSION_LOST error, and an empty report from a scan that never really ran are not clean results, and what an invalid_params error is telling the agent to fix.

Prerequisite

The skill assumes the dalfox binary or MCP server is reachable from the agent's environment. Install Dalfox first (installation guide), then install the skill.

Authoring tips

The skill file lives at skills/dalfox/SKILL.md in the repository. Contributions are welcome; keep it focused on how an agent should drive Dalfox, not on restating CLI reference material that already lives in the CLI reference.

ESC