Sonar agent skills

Skills are machine-consumed playbooks for using Sonar tools safely. This page is the human catalog; each link points to a separately downloadable raw SKILL.md, so the source an agent installs is not nested inside explanatory documentation.

Inventory and coordination

Skill	Audience and use	Raw source
`explore-target-assets`	Read-only mapping of a known or discoverable program before deciding to scan.	Download `SKILL.md`
`request-astrix-recon`	Coordinator asks Astrix for one bounded action and follows the request through clarification or completion.	Download `SKILL.md`

Pentest recon

Skill	Audience and use	Raw source
`operate-sonar-recon`	Public pentest operator selects one category-`AI` workflow, starts one program-bounded scan, and inspects refreshed Inventory.	Download `SKILL.md`

Astrix authoring

Skill	Audience and use	Raw source
`author-sonar-workflows`	Astrix produces and structurally validates a complete bounded workflow document; it does not persist or execute it.	Download `SKILL.md`

Asset synchronization

Skill	Audience and use	Raw source
`sync-data`	A sync worker derives approved observations from engagement state and pushes parent-before-child Inventory writes.	Download `SKILL.md`

Admin-only legacy references

These references remain available for authorized internal compatibility. They are not the current public recon procedure.

Skill	Status	Raw source
`using-sonar-workflow-infrastructure`	Legacy workflow-catalog interpretation for internal administrators.	Download `SKILL.md`
`run-and-fetch-scan-results`	Legacy durable-result reference for administrators.	Download `SKILL.md`

Delivery through Sonar MCP

Sonar MCP exposes skills as profile-filtered prompts. This is zero-install, but it does not mean every profile receives all seven files. For example, pentest receives explore-target-assets and operate-sonar-recon; sync receives sync-data; and astrix-author receives explore-target-assets and author-sonar-workflows.

Use the prompt list returned by the active connection as the effective set. See MCP security and profiles.

Install files locally

The installers read /skills-dist/files.txt and copy the selected plain-text files into a Claude skills directory. With no names, they install all available skills.

macOS or Linux:

# list the exact published set
curl -fsSL https://docs.astrixion.ai/install.sh | sh -s -- --list
 
# install one skill into a project-local directory
curl -fsSL https://docs.astrixion.ai/install.sh \
  | sh -s -- operate-sonar-recon --dir ./.claude/skills

Windows PowerShell:

# list
& ([scriptblock]::Create((irm https://docs.astrixion.ai/install.ps1))) -List
 
# install one skill
& ([scriptblock]::Create((irm https://docs.astrixion.ai/install.ps1))) `
  operate-sonar-recon -Dir .\.claude\skills

Review a skill before installing it into an agent harness with more authority than the skill's intended profile.