feat(skills): add dirsearch path enumeration playbook - #1291
Conversation
dirsearch ships in the sandbox and is named in the system prompt, but unlike every other core recon tool (ffuf, nuclei, sqlmap, nmap, httpx, subfinder, naabu, katana) it had no `/tooling` playbook — so agents got no command structure, filtering strategy, non-interactive defaults, or recovery guidance for path/content enumeration. Add `strix/skills/tooling/dirsearch.md` mirroring the ffuf playbook (auto-discovered by the skills glob loader): canonical syntax, high-signal flags, agent-safe baseline, common patterns, correctness/usage rules, failure recovery, and a reciprocal ffuf cross-reference. List dirsearch in the skills README tooling row. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Greptile SummaryAdds an auto-discovered dirsearch path-enumeration playbook and lists it among the documented sandbox tooling.
Confidence Score: 4/5The PR should not merge until the incorrect dirsearch delay option is corrected so agents do not receive broken rate-limit recovery guidance. The new playbook twice treats Files Needing Attention: strix/skills/tooling/dirsearch.md Important Files Changed
Prompt To Fix All With AI### Issue 1
strix/skills/tooling/dirsearch.md:29
**Incorrect delay short option**
The playbook documents `-s` as the short form of `--delay`, but the sandbox-installed dirsearch CLI uses `-s` to select a session file. An agent following this guidance, including the recovery advice on line 72, would try to load a session instead of slowing requests, so the command can fail or behave incorrectly. Use `--delay` in both locations.
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.Reviews (1): Last reviewed commit: "feat(skills): add dirsearch path enumera..." | Re-trigger Greptile |
| - `--exclude-sizes <sizes>` drop responses of a given size (e.g. `0B,123B`) | ||
| - `--exclude-text <str>` / `--exclude-regex <re>` drop soft-404 bodies | ||
| - `-r` recursive discovery; `-R <n>` / `--max-recursion-depth <n>` cap depth; `--recursion-status <codes>` | ||
| - `-t <n>` threads; `--max-rate <n>` requests/sec cap; `-s <sec>` / `--delay <sec>` per-request delay |
There was a problem hiding this comment.
The playbook documents -s as the short form of --delay, but the sandbox-installed dirsearch CLI uses -s to select a session file. An agent following this guidance, including the recovery advice on line 72, would try to load a session instead of slowing requests, so the command can fail or behave incorrectly. Use --delay in both locations.
Prompt To Fix With AI
This is a comment left during a code review.
Path: strix/skills/tooling/dirsearch.md
Line: 29
Comment:
**Incorrect delay short option**
The playbook documents `-s` as the short form of `--delay`, but the sandbox-installed dirsearch CLI uses `-s` to select a session file. An agent following this guidance, including the recovery advice on line 72, would try to load a session instead of slowing requests, so the command can fail or behave incorrectly. Use `--delay` in both locations.
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.
dirsearch ships in the sandbox and is named in the system prompt, but unlike every other core recon tool (ffuf, nuclei, sqlmap, nmap, httpx, subfinder, naabu, katana) it had no
/toolingplaybook — so agents got no command structure, filtering strategy, non-interactive defaults, or recovery guidance for path/content enumeration.Add
strix/skills/tooling/dirsearch.mdmirroring the ffuf playbook (auto-discovered by the skills glob loader): canonical syntax, high-signal flags, agent-safe baseline, common patterns, correctness/usage rules, failure recovery, and a reciprocal ffuf cross-reference. List dirsearch in the skills README tooling row.