mirror of
https://github.com/SquidSec/SquidC5
synced 2026-08-09 12:22:26 +00:00
Mr. The Plague
cadb1f60d6
Document the 10 prioritized next-gen focus areas (malleable profiles first) and restate PR→test→merge→binary-only prod deploy as mandatory agent policy.
814 B
814 B
CLAUDE.md
SquidC5 is a military-grade, security-first, AI-native C2 under active development for authorized red team / pen-test use only.
Follow AGENTS.md as the primary agent memory for this repository.
Also read:
docs/squidc5-vision.md— product/security architecturedocs/roadmap-2026-2027.md— 2026–2027 prioritized roadmap (start with malleable C2 profiles)docs/operator-runbook.md— operator CLI & reverse-shell proceduresdocs/deployment.md— Docker / droplet deployment
Hard rules
- Secure by default (no public docs/OpenAPI, no wildcard CORS, MCP off until enabled)
- Admin UI only after server validates admin token (
/api/v1/ops/admin.js) - No secrets in git
- MCP allow-lists and Admin AI sandbox are non-negotiable
- Do not help with unauthorized access