salvacybersec/personas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
00d30e8db3a3d5a96727fd16c2de3c1310661fe2
personas/personas/CATALOG.md
salvacybersec 1a3fea615a feat: major expansion — 3 new variants, enhanced build system, platform auto-install 
New persona variants:
- forge/frontend-design — DESIGN.md methodology, 58-brand reference, UI/UX intelligence
- oracle/source-verification — 5-section forensic verification protocol (ethos/pathos/context/intent/logos)
- sentinel/c2-hunting — 6-phase C2 hunting with beaconing detection, detection engineering

Enhanced existing personas:
- neo: Added Active Directory exploitation (Kerberoasting, DCSync, delegation), network pivoting, cloud attacks
- frodo: Added response mode auto-detection, claim extraction, Devil's Advocate, explicit uncertainty tracking
- ghost: Added cognitive warfare expertise (behavioral science weaponization, algorithmic amplification)

Build system enhancements:
- Cross-persona escalation graph auto-extracted → generated/_index/escalation_graph.json
- Trigger→persona routing index → generated/_index/trigger_index.json
- Quality validation with warnings for thin/missing sections
- Section word counts injected into every output
- Richer CATALOG.md with depth stats, escalation paths, trigger index

Platform auto-install:
- python3 build.py --install claude — 111 slash commands → ~/.claude/commands/
- python3 build.py --install antigravity — personas → ~/.config/antigravity/personas/
- python3 build.py --install gemini — Gems → generated/_gems/
- python3 build.py --install openclaw — IDENTITY.md + personas → generated/_openclaw/
- python3 build.py --install all — deploy to all platforms

Shared reference library:
- personas/_shared/kali-tools/ — 16 Kali Linux tool reference docs
- personas/_shared/osint-sources/ — OSINT master reference
- personas/_shared/ad-attack-tools/ — AD attack chain reference

Stats: 29 personas, 111 variants, 59,712 words

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-06 21:04:47 +03:00

16 KiB
Raw Blame History

Persona Catalog

Auto-generated by build.py | User: Salva

arbiter — International Law & War Crimes Specialist

  • Domain: law
  • Hitap: Kadı
  • Variants: general, salva, sanctions
  • Depth: 2,880 words, 6 sections
  • Escalates to: frodo, marshal, tribune, chronos

architect — DevOps & Systems Engineer

  • Domain: engineering
  • Hitap: Mimar Ağa
  • Variants: general, salva
  • Depth: 1,526 words, 6 sections
  • Escalates to: forge, vortex, neo

bastion — Blue Team Lead / DFIR Specialist

  • Domain: cybersecurity
  • Hitap: Muhafız
  • Variants: forensics, general, incident-commander, threat-hunting
  • Depth: 1,523 words, 6 sections
  • Escalates to: neo, specter, sentinel, vortex

centurion — Military History & War Analysis Specialist

  • Domain: military
  • Hitap: Vakanüvis
  • Variants: general, ottoman-wars, salva, ukraine-russia
  • Depth: 2,269 words, 6 sections
  • Escalates to: marshal, warden, chronos, corsair

chronos — World History & Civilization Analysis Specialist

  • Domain: history
  • Hitap: Tarihçibaşı
  • Variants: general, salva
  • Depth: 2,581 words, 6 sections
  • Escalates to: centurion, scholar, sage, tribune, scribe

cipher — Cryptography & Crypto Analysis Specialist

  • Domain: cybersecurity
  • Hitap: Kriptoğraf
  • Variants: general
  • Depth: 1,150 words, 6 sections
  • Escalates to: neo, vortex, phantom, specter

corsair — Special Operations & Irregular Warfare Specialist

  • Domain: military
  • Hitap: Akıncı
  • Variants: general, proxy-warfare, salva
  • Depth: 2,352 words, 6 sections
  • Escalates to: marshal, wraith, centurion, warden

echo — SIGINT / COMINT / ELINT Specialist

  • Domain: intelligence
  • Hitap: Kulakçı
  • Variants: electronic-order-of-battle, general, nsa-sigint, salva
  • Depth: 2,504 words, 6 sections
  • Escalates to: cipher, vortex, frodo, wraith, sentinel

forge — Software Development & AI/ML Engineer

  • Domain: engineering
  • Hitap: Demirci
  • Variants: agent-dev, frontend-design, general, salva
  • Depth: 1,882 words, 6 sections
  • Escalates to: architect, cipher, sentinel

frodo — Strategic Intelligence Analyst

  • Domain: intelligence
  • Hitap: Müsteşar
  • Variants: africa, china, energy-geopolitics, general, india, iran, middle-east, nato-alliance, nuclear, pakistan, russia, salva, turkey
  • Depth: 1,776 words, 6 sections
  • Escalates to: oracle, ghost, wraith, echo, sentinel, marshal

gambit — Chess & Strategic Thinking Specialist

  • Domain: strategy
  • Hitap: Vezir
  • Variants: general, salva
  • Depth: 2,548 words, 6 sections
  • Escalates to: marshal, sage, tribune, corsair

ghost — PSYOP & Information Warfare Specialist

  • Domain: intelligence
  • Hitap: Propagandist
  • Variants: cognitive-warfare, general, russian-info-war, salva
  • Depth: 2,117 words, 6 sections
  • Escalates to: oracle, frodo, herald, wraith

herald — Media Analysis & Strategic Communication Specialist

  • Domain: media
  • Hitap: Münadi
  • Variants: general, salva
  • Depth: 2,827 words, 6 sections
  • Escalates to: ghost, polyglot, oracle, frodo

ledger — Economic Intelligence & FININT Specialist

  • Domain: economics
  • Hitap: Defterdar
  • Variants: general, salva, sanctions-evasion
  • Depth: 2,847 words, 6 sections
  • Escalates to: arbiter, frodo, tribune, scribe

marshal — Military Doctrine & Strategy Specialist

  • Domain: military
  • Hitap: Mareşal
  • Variants: chinese-doctrine, general, hybrid-warfare, iranian-military, nato-doctrine, russian-doctrine, salva, turkish-doctrine, wargaming
  • Depth: 1,760 words, 6 sections
  • Escalates to: centurion, warden, corsair, frodo

medic — Biomedical & CBRN Specialist

  • Domain: science
  • Hitap: Hekim Başı
  • Variants: cbrn-defense, general, salva
  • Depth: 2,309 words, 6 sections
  • Escalates to: warden, frodo, marshal, corsair

neo — Red Team Lead / Exploit Developer

  • Domain: cybersecurity
  • Hitap: Sıfırıncı Gün
  • Variants: exploit-dev, general, mobile-security, redteam, salva, social-engineering, wireless
  • Depth: 1,090 words, 6 sections
  • Escalates to: bastion, phantom, specter, vortex, sentinel

oracle — OSINT & Digital Intelligence Specialist

  • Domain: intelligence
  • Hitap: Kaşif
  • Variants: crypto-osint, general, salva, source-verification
  • Depth: 1,880 words, 6 sections
  • Escalates to: ghost, sentinel, frodo, herald

phantom — Web App Security Specialist / Bug Bounty Hunter

  • Domain: cybersecurity
  • Hitap: Beyaz Şapka
  • Variants: api-security, bug-bounty, general
  • Depth: 1,129 words, 6 sections
  • Escalates to: neo, vortex, cipher, sentinel

polyglot — Linguistics & LINGINT Specialist

  • Domain: linguistics
  • Hitap: Tercüman-ı Divan
  • Variants: arabic, general, russian, salva, swahili
  • Depth: 2,308 words, 6 sections
  • Escalates to: frodo, ghost, herald, scholar

sage — Philosophy, Psychology & Power Theory Specialist

  • Domain: humanities
  • Hitap: Arif
  • Variants: general, salva
  • Depth: 2,132 words, 6 sections
  • Escalates to: tribune, scholar, chronos, ghost

scholar — Academic Researcher

  • Domain: academia
  • Hitap: Münevver
  • Variants: general, salva
  • Depth: 1,588 words, 6 sections
  • Escalates to: frodo, tribune, sage, chronos

scribe — FOIA Archivist & Declassified Document Analyst

  • Domain: history
  • Hitap: Verakçı
  • Variants: cia-foia, cold-war-ops, general, salva
  • Depth: 2,847 words, 6 sections
  • Escalates to: chronos, wraith, frodo, echo

sentinel — Cyber Threat Intelligence Analyst

  • Domain: cybersecurity
  • Hitap: İzci
  • Variants: apt-profiling, c2-hunting, darknet, general, mitre-attack, salva
  • Depth: 1,558 words, 6 sections
  • Escalates to: specter, bastion, frodo, neo, echo

specter — Malware Analyst / Reverse Engineer

  • Domain: cybersecurity
  • Hitap: Cerrah
  • Variants: firmware, general
  • Depth: 1,446 words, 6 sections
  • Escalates to: bastion, sentinel, neo, cipher

tribune — Political Science & Regime Analysis Specialist

  • Domain: politics
  • Hitap: Müderris
  • Variants: general, salva
  • Depth: 3,356 words, 6 sections
  • Escalates to: frodo, chronos, arbiter, sage, scholar

vortex — Network Operations & Traffic Analysis Specialist

  • Domain: cybersecurity
  • Hitap: Telsizci
  • Variants: cloud-ad, general
  • Depth: 1,439 words, 6 sections
  • Escalates to: neo, phantom, bastion, cipher, sentinel

warden — Defense Analyst & Weapons Systems Specialist

  • Domain: military
  • Hitap: Topçubaşı
  • Variants: drone-warfare, electronic-warfare, general, naval-warfare, salva
  • Depth: 1,823 words, 6 sections
  • Escalates to: marshal, centurion, corsair, medic

wraith — HUMINT & Counter-Intelligence Specialist

  • Domain: intelligence
  • Hitap: Mahrem
  • Variants: case-studies, general, salva, source-validation
  • Depth: 2,265 words, 6 sections
  • Escalates to: oracle, ghost, echo, frodo, sentinel

Activation Trigger Index

Keyword → persona routing for multi-agent systems

  • 0day → neo
  • academic → scholar
  • active directory → vortex
  • aes → cipher
  • agent → forge
  • agent handling → wraith
  • ai → forge
  • air defense → warden
  • akıncı → corsair
  • ancient → chronos
  • ansible → architect
  • anthrax → medic
  • api → forge
  • api security → phantom
  • apt → sentinel
  • arabic → polyglot
  • archives → scribe
  • army → marshal
  • attribution → sentinel
  • authoritarianism → tribune
  • automation → architect
  • battle → centurion
  • bayraktar → warden
  • beneficial ownership → ledger
  • bgp → vortex
  • binary analysis → specter
  • biological threat → medic
  • bioweapon → medic
  • blue team → bastion
  • breach → bastion
  • briefing → frodo
  • broadcast → herald
  • buffer overflow → neo
  • bug bounty → phantom
  • build → forge
  • cable → scribe
  • campaign → centurion, sentinel
  • cbrn → medic, warden
  • certificate → cipher
  • chemical weapon → medic
  • chess → gambit
  • chess position → gambit
  • ci → wraith
  • ci/cd → architect
  • cia → scribe
  • cipher → cipher
  • citation → scholar
  • civilization → chronos
  • classified document → scribe
  • code → forge
  • cognitive warfare → ghost
  • coin → corsair
  • cold war → centurion, chronos
  • cold war documents → scribe
  • combined arms → marshal
  • comint → echo
  • commando → corsair
  • comparative politics → tribune
  • component → forge
  • counter-intelligence → wraith
  • counter-narrative → ghost
  • counter-terrorism → corsair
  • country analysis → frodo
  • crypto → cipher
  • cryptography → cipher
  • css → forge
  • cti → sentinel
  • dark psychology → sage
  • dark web → sentinel
  • database → forge
  • declassified → scribe
  • decolonization → chronos
  • decompile → specter
  • decontamination → medic
  • defector → wraith
  • defense → marshal
  • defense industry → warden
  • democracy → tribune
  • deploy → architect
  • design system → forge
  • design.md → forge
  • detection → bastion
  • development → forge
  • devops → architect
  • dfir → bastion
  • dialect → polyglot
  • digital footprint → oracle
  • disassembly → specter
  • disinformation → ghost
  • dns → vortex
  • docker → architect
  • domain lookup → oracle
  • double agent → wraith
  • drone → warden
  • economic warfare → ledger
  • elections → tribune
  • electronic warfare → echo, warden
  • elf → specter
  • elint → echo
  • encryption → cipher
  • endgame → gambit
  • energy economics → ledger
  • entity research → oracle
  • epidemic → medic
  • espionage → wraith
  • ethics → sage
  • evidence → bastion
  • exam → scholar
  • existentialism → sage
  • exploit → neo
  • fatf → ledger
  • fbi → scribe
  • field manual → marshal
  • field medicine → medic
  • financial intelligence → ledger
  • finint → ledger
  • firmware → specter
  • foia → scribe
  • force structure → marshal
  • forecast → frodo
  • forensics → bastion
  • foucault → sage
  • french → polyglot
  • frontend → forge
  • gallipoli → centurion
  • gambit → gambit
  • game dev → forge
  • game theory → sage
  • geneva convention → arbiter
  • geolocation → echo, oracle
  • geopolitics → frodo
  • governance → tribune
  • grandmaster → gambit
  • guerrilla → corsair
  • hack → neo
  • hague → arbiter
  • hash → cipher
  • historiography → chronos
  • history → chronos
  • homework → scholar
  • humanitarian law → arbiter
  • humint → wraith
  • ibn khaldun → sage
  • icc → arbiter
  • ideology → tribune
  • idor → phantom
  • illicit finance → ledger
  • implement → forge
  • incident response → bastion
  • influence operation → ghost
  • information warfare → ghost
  • infrastructure → architect
  • initial access → neo
  • insurgency → corsair
  • intelligence → frodo
  • intelligence history → scribe
  • intercept → echo
  • international law → arbiter
  • interpreter → polyglot
  • investigate → oracle
  • ioc → sentinel
  • iran → frodo
  • javascript → forge
  • jewish history → chronos
  • journalism → herald
  • jstor → scholar
  • key exchange → cipher
  • kubernetes → architect
  • language → polyglot
  • lateral movement → vortex
  • leadership → sage
  • legal analysis → arbiter
  • lessons learned → centurion
  • lingint → polyglot
  • linguistic → polyglot
  • linux → architect
  • literature review → scholar
  • llm → forge
  • machiavelli → sage
  • malware → specter
  • manipulation → ghost, sage
  • mate → gambit
  • mdmp → marshal
  • media → herald
  • media monitoring → herald
  • medical → medic
  • medieval → chronos
  • memetic → ghost
  • memory forensics → bastion
  • metadata analysis → echo
  • methodology → scholar
  • military analysis → frodo
  • military doctrine → marshal
  • military history → centurion
  • military technology → warden
  • missile → warden
  • mitre att&ck → sentinel
  • ml → forge
  • mole → wraith
  • money laundering → ledger
  • monitoring → architect
  • narrative → ghost, herald
  • nato → frodo, marshal
  • nerve agent → medic
  • network → vortex
  • news analysis → herald
  • nginx → architect
  • nsa → echo, scribe
  • oauth → phantom
  • opening → gambit
  • operational file → scribe
  • operations → marshal
  • osint → oracle
  • ottoman → chronos
  • ottoman military → centurion
  • owasp → phantom
  • pandemic → medic
  • paper → scholar
  • pawn structure → gambit
  • pcap → vortex
  • pdb → frodo
  • pe file → specter
  • pentest → neo
  • persian → polyglot
  • person search → oracle
  • persuasion → sage
  • philosophy → sage
  • pivoting → vortex
  • pki → cipher
  • political party → tribune
  • political risk → tribune
  • political science → tribune
  • power → sage
  • press → herald
  • press freedom → herald
  • privilege escalation → neo
  • programming → forge
  • propaganda → ghost
  • propaganda detection → herald
  • proxy war → corsair
  • psychology → sage
  • psyop → ghost
  • public health → medic
  • python → forge
  • radiation → medic
  • radio → echo
  • recruitment → wraith
  • red team → neo
  • redaction → scribe
  • regime → tribune
  • republic → chronos
  • research → scholar
  • reverse engineering → specter
  • revolution → tribune
  • routing → vortex
  • rsa → cipher
  • rss → herald
  • russia → frodo
  • russian → polyglot
  • russian history → chronos
  • rust → forge
  • s-400 → warden
  • sacrifice → gambit
  • sanctions → arbiter, ledger
  • server → architect
  • shadcn → forge
  • shell company → ledger
  • shellcode → neo
  • sicilian → gambit
  • siem → bastion
  • sigint → echo
  • signals intelligence → echo
  • soc → bastion
  • social media intel → oracle
  • sof → corsair
  • software → forge
  • source handling → wraith
  • special forces → corsair
  • special operations → corsair
  • spectrum → echo
  • spy → wraith
  • sql injection → phantom
  • ssl → cipher
  • ssrf → phantom
  • state building → tribune
  • stay-behind → corsair
  • stoicism → sage
  • strategic → frodo
  • strategic communication → herald
  • strategy → marshal
  • strategy game → gambit
  • strategy history → centurion
  • study → scholar
  • swahili → polyglot
  • swift → ledger
  • systemd → architect
  • tactics → gambit
  • tailwind → forge
  • tallinn manual → arbiter
  • tank → warden
  • tcp → vortex
  • thesis → scholar
  • threat actor → sentinel
  • threat hunting → bastion, sentinel
  • threat intelligence → sentinel
  • tls → cipher
  • trade → ledger
  • tradecraft → wraith
  • traffic analysis → echo, vortex
  • translation → polyglot
  • treaty → arbiter
  • ttp → sentinel
  • turkish → polyglot
  • ui → forge
  • unclos → arbiter
  • unconventional warfare → corsair
  • university → scholar
  • unpacking → specter
  • urdu → polyglot
  • ux → forge
  • vlan → vortex
  • war analysis → centurion
  • war crimes → arbiter
  • war planning → marshal
  • warship → warden
  • weapons → warden
  • web app → phantom
  • web security → phantom
  • wireshark → vortex
  • wwi → centurion
  • wwii → centurion
  • xss → phantom
  • yara → specter

Build Statistics

  • Total prompt content: 59,712 words
  • Total sections: 174
  • Escalation connections: 123
  • Unique triggers: 333