.cursor/skills/hack3270/SKILL.md
Guardrailed mainframe application pen testing via hack3270 MCP tools. Use when pen testing a specific CICS/KICKS application on a mainframe. Enforces transaction scope locking, prevents denial of service, avoids account lockout, and requires human approval before escalation. Keeps the AI focused on the target application without scope creep into system transactions, TSO post-exploitation, or JCL submission.
npx skillsauth add gglessner/hack3270 hack3270Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
The full skill content is located at: skills/hack3270.md
Read that file now using the Read tool.
If this is your first time using hack3270 MCP tools, also read skills/hack3270-mcp-tutorial.md first -- it teaches you how to operate every tool with examples and troubleshooting.
testing
Mainframe TN3270/CICS penetration testing via hack3270. Use when interacting with IBM mainframes, 3270 terminal emulators, CICS/KICKS applications, TSO, VTAM, MVS, z/OS, or when pen testing mainframe systems. Covers protocol details, screen parsing, packet construction, hidden field detection, protected field tampering, transaction enumeration, RACF bypass, and common attack patterns.
tools
Complete tutorial for AI assistants on using hack3270 MCP tools. Covers all 53 tools with examples, common patterns, gotchas, troubleshooting, and TN3270 protocol reference. Read this before using any hack3270 pen testing skill. Use when working with mainframe terminals, TN3270, CICS, hack3270, or MCP tools.
tools
Read-only interaction with Broadcom Endevor SCM via the Endevor-MCP server. Provides 22 read-only tools for inventory browsing, element retrieval and inspection, package listing, async task management, and fingerprint validation. Use when the user asks about Endevor source code review, mainframe security assessments, or augmenting TN3270/hack3270 penetration testing with source code analysis. This server cannot modify Endevor — no add, update, delete, move, generate, sign-out, package mutations, or SCL submission.
tools
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.