skills.rest
HeaSecHeaSecOfficial·1 Agent Skills Included

Pentest-Lyan

Authorized web penetration testing with autonomous threat modeling

Runs authorized web penetration tests through discovery, attack, and audit phases with autonomous 12-dimension threat modeling. Reads frontend JavaScript to map business logic, builds permission matrices, and verifies real database-level impact instead of trusting status codes. Persists state across sessions for resumable multi-project testing and generates structured Markdown and Word vulnerability reports.
114|11
↗
npx skills add HeaSec/Pentest-Lyan --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators
📦 In Repo
HeaSecHeaSec

pentest-lyan

Conduct authorized web application penetration tests and validate vulnerabilities with reproducible evidence.

Official
Advanced

Frequently Asked Questions

FAQPage Schema
How to install Pentest-Lyan?▼

Run `npx skills add HeaSec/Pentest-Lyan --all -g -y` in your terminal to install the skill globally, then invoke it with /pentest-lyan followed by your target URL.

What does Pentest-Lyan actually test?▼

It performs authorized web application penetration testing: discovering APIs, modeling threats across 12 dimensions, verifying cross-role access control issues, and confirming real business impact of each vulnerability.

Does Pentest-Lyan work with Claude Code?▼

Yes. It runs in Claude Code or Kimi Code and uses browser automation via Playwright MCP, falling back to curl when no browser tooling is available.

Can I resume an interrupted penetration test?▼

Yes. State is persisted per project in JSON files, so you can run /pentest-lyan --resume with a project ID to continue exactly where testing stopped.

Do I need multiple test accounts to use it?▼

No. Two or more accounts enable full cross-role privilege testing, but with zero or one account the skill still runs normally and notes the limitation in the final report.

Related Repositories in Software Engineering

View All in Software Engineering→
openclawopenclaw
388.4k

openclaw

Run a personal AI assistant across your devices and chat apps

Official📦 120 Skills
obraobra
280.0k

superpowers

Gives coding agents a disciplined workflow from idea to merged code

Community📦 15 Skills
facebookfacebook
248.4k

react

AI agent skills for building, testing, and porting React core

Official📦 14 Skills