Prohao42Community·42 Agent Skills Included

aimy-skill

Automated penetration testing, vulnerability scanning, and exploit playbooks

Automates web and network penetration testing across recon, injection, authentication, and business logic flaws. Covers 65 modules and 80+ attack playbooks for SQL injection, XSS, SSRF, JWT abuse, container escape, and Active Directory attacks. Eliminates manual payload crafting and repetitive scanning with structured JSON output and one-command full-chain audits.

120|8

↗

npx skills add Prohao42/aimy-skill --all -g -y

All Skills in This Repository (42)

Pure Emerald Level Indicators

📦 In Repo

Prohao42

ssti-server-side-template-injection

Detect server-side template injection vulnerabilities using polyglot probes and engine fingerprinting.

defi-attack-patterns

Analyze DeFi protocols for flash loan, oracle, MEV, and governance attack patterns.

browser-exploitation-v8

Analyze V8 JavaScript engine vulnerabilities and sandbox bypass techniques.

xxe-xml-external-entity

Detect, exploit, and mitigate XML External Entity injection vulnerabilities.

linux-privilege-escalation

Identify Linux privilege escalation vectors via SUID/SGID, capabilities, cron jobs, and kernel exploits.

container-escape-techniques

Explore container escape techniques for penetration testing in Docker, LXC, or Kubernetes.

active-directory-kerberos-attacks

Exploit Kerberos vulnerabilities in Active Directory for reconnaissance and privilege escalation.

path-traversal-lfi

Identify and exploit path traversal and local file inclusion vulnerabilities in web applications.

llm-prompt-injection

Test AI/LLM applications for prompt injection and defense bypass techniques.

401-403-bypass-techniques

Bypass 401/403 access controls using path, method, header, and protocol techniques.

arbitrary-write-to-rce

Convert arbitrary writes to code execution across glibc versions.

linux-lateral-movement

Automate lateral movement across Linux hosts using SSH agent hijacking and credential harvesting.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install aimy-skill?▼

Run `npx skills add Prohao42/aimy-skill --all -g -y` in your terminal to install all skills in this suite globally.

What does aimy-skill do?▼

It is a penetration testing toolkit with 65 modules covering recon, injection detection, authentication bypass, business logic flaws, and weaponization, plus 80+ expert attack playbooks for your agent.

How to run a full automated pentest with aimy-skill?▼

After installing the Python dependencies, run `python main.py auto -u http://target.com` to execute crawling, vulnerability detection, weaponization, and report generation in one command.

Does aimy-skill work with Claude Code and Cursor?▼

Yes. All modules expose a unified check() interface with structured JSON output, and the SKILL.md playbooks load directly into Claude Code, Cursor, and other compatible agents.

Is aimy-skill legal to use?▼

Only use it on systems you own or have written authorization to test, such as bug bounty programs and lab environments. Unauthorized scanning or exploitation is illegal.