Skip to content

feat(skills): add dirsearch path enumeration playbook - #1291

Open
baonq-me wants to merge 1 commit into
usestrix:mainfrom
baonq-me:feat/dirsearch-path-enumeration-playbook
Open

feat(skills): add dirsearch path enumeration playbook#1291
baonq-me wants to merge 1 commit into
usestrix:mainfrom
baonq-me:feat/dirsearch-path-enumeration-playbook

Conversation

@baonq-me

@baonq-me baonq-me commented Sep 9, 2026

Copy link
Copy Markdown

dirsearch ships in the sandbox and is named in the system prompt, but unlike every other core recon tool (ffuf, nuclei, sqlmap, nmap, httpx, subfinder, naabu, katana) it had no /tooling playbook — so agents got no command structure, filtering strategy, non-interactive defaults, or recovery guidance for path/content enumeration.

Add strix/skills/tooling/dirsearch.md mirroring the ffuf playbook (auto-discovered by the skills glob loader): canonical syntax, high-signal flags, agent-safe baseline, common patterns, correctness/usage rules, failure recovery, and a reciprocal ffuf cross-reference. List dirsearch in the skills README tooling row.

dirsearch ships in the sandbox and is named in the system prompt, but
unlike every other core recon tool (ffuf, nuclei, sqlmap, nmap, httpx,
subfinder, naabu, katana) it had no `/tooling` playbook — so agents got
no command structure, filtering strategy, non-interactive defaults, or
recovery guidance for path/content enumeration.

Add `strix/skills/tooling/dirsearch.md` mirroring the ffuf playbook
(auto-discovered by the skills glob loader): canonical syntax, high-signal
flags, agent-safe baseline, common patterns, correctness/usage rules,
failure recovery, and a reciprocal ffuf cross-reference. List dirsearch
in the skills README tooling row.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@greptile-apps

greptile-apps Bot commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

Adds an auto-discovered dirsearch path-enumeration playbook and lists it among the documented sandbox tooling.

  • Covers common filters, bounded recursion, structured output, authentication, proxying, and recovery strategies.
  • Positions dirsearch as the broad-enumeration counterpart to ffuf.
  • Contains one incorrect short option in its delay and rate-limit recovery guidance.

Confidence Score: 4/5

The PR should not merge until the incorrect dirsearch delay option is corrected so agents do not receive broken rate-limit recovery guidance.

The new playbook twice treats -s as a delay option, although the installed dirsearch CLI uses it for session files; the documented --delay form remains valid.

Files Needing Attention: strix/skills/tooling/dirsearch.md

Important Files Changed

Filename Overview
strix/skills/tooling/dirsearch.md Adds the dirsearch CLI playbook; its -s delay guidance conflicts with the sandbox-installed CLI.
strix/skills/README.md Adds dirsearch to the tooling-category inventory consistently with the new skill.
Prompt To Fix All With AI
### Issue 1
strix/skills/tooling/dirsearch.md:29
**Incorrect delay short option**

The playbook documents `-s` as the short form of `--delay`, but the sandbox-installed dirsearch CLI uses `-s` to select a session file. An agent following this guidance, including the recovery advice on line 72, would try to load a session instead of slowing requests, so the command can fail or behave incorrectly. Use `--delay` in both locations.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

Reviews (1): Last reviewed commit: "feat(skills): add dirsearch path enumera..." | Re-trigger Greptile

- `--exclude-sizes <sizes>` drop responses of a given size (e.g. `0B,123B`)
- `--exclude-text <str>` / `--exclude-regex <re>` drop soft-404 bodies
- `-r` recursive discovery; `-R <n>` / `--max-recursion-depth <n>` cap depth; `--recursion-status <codes>`
- `-t <n>` threads; `--max-rate <n>` requests/sec cap; `-s <sec>` / `--delay <sec>` per-request delay

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Incorrect delay short option

The playbook documents -s as the short form of --delay, but the sandbox-installed dirsearch CLI uses -s to select a session file. An agent following this guidance, including the recovery advice on line 72, would try to load a session instead of slowing requests, so the command can fail or behave incorrectly. Use --delay in both locations.

Prompt To Fix With AI
This is a comment left during a code review.
Path: strix/skills/tooling/dirsearch.md
Line: 29

Comment:
**Incorrect delay short option**

The playbook documents `-s` as the short form of `--delay`, but the sandbox-installed dirsearch CLI uses `-s` to select a session file. An agent following this guidance, including the recovery advice on line 72, would try to load a session instead of slowing requests, so the command can fail or behave incorrectly. Use `--delay` in both locations.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant