Imported from ooovenenoso/BadUSB-GPT (
AGENTS.md). Install upstream withnpx skills add ooovenenoso/BadUSB-GPT. Copyright stays with the author.
Repository Instructions
This repository contains USB Rubber Ducky payloads that interact with GPT-based services for authorized defensive assessment workflows.
Two top-level folders store experiments:
unconfirmed_experiments/– draft or proof-of-concept scripts. Anything here should be treated as experimental.confirmed_experiments/– scripts that have been tested and approved for general use.
Owner-maintained workflow:
- Place untested or in-progress payloads inside
unconfirmed_experiments/. - After validating a script, move it to
confirmed_experiments/. - Keep filenames and documentation in English.
- Keep the public payload structurally hardcoded, but commit only the safe placeholder
PASTE_OPENAI_API_KEY_HEREinstead of a real API key. - Do not embed real API keys, bearer tokens, host-specific secrets, or generated private report data.
- Keep payloads non-destructive and scoped to authorized defensive use.
- Run repository checks before committing:
python scripts/generate_payloads.py
python scripts/validate_payloads.py
These instructions apply to all files in this repository.