ok-helloworldCommunity·46 Agent Skills Included

vibe-pentest

Automated black-box web penetration testing with parallel scanning

Runs full black-box penetration tests on web applications, APIs, and admin panels using parallel specialized scanners. Covers SQL injection, XSS, auth bypass, file upload flaws, business logic abuse, and known CVE verification with fingerprint matching. Eliminates manual reconnaissance, payload crafting, and report writing by chaining crawling, testing, and evidence collection. Produces ready-to-share HTML and Word security reports with concrete remediation advice.

241|28

↗

npx skills add ok-helloworld/vibe-pentest --all -g -y

All Skills in This Repository (46)

Pure Emerald Level Indicators

📦 In Repo

ok-helloworld

vibe-pentest

Automate black-box web penetration testing with multi-agent reconnaissance and evidence-based reporting.

file-access-vuln

Route file access and upload workflow testing to path traversal or processing-chain issues.

injection-checking

Route suspected injection inputs to matching injection-testing workflows by sink context.

prototype-pollution

Probe __proto__ and constructor.prototype paths to detect prototype pollution vulnerabilities.

saml-sso-assertion-attacks

Detect SAML SSO authentication bypass paths from assertion trust misconfigurations.

api-sec

Route API security testing to workflows based on observed target patterns.

http-host-header-attacks

Identify Host header injection and routing abuse vectors in web applications.

websocket-security

Identify WebSocket handshake weaknesses, CSWSH conditions, and message-level vulnerabilities.

graphql-and-hidden-parameters

Discover hidden GraphQL fields and authorization gaps via schema and type probing.

xxe-xml-external-entity

Detect and exploit XXE vulnerabilities for file disclosure and blind OOB exfiltration.

nosql-injection

Detect NoSQL injection via MongoDB operator manipulation and blind enumeration.

clickjacking

Assess X-Frame-Options and CSP frame-ancestors to detect clickjacking vulnerabilities.

Community

Intermediate

Frequently Asked Questions

FAQPage Schema

How to install vibe-pentest?▼

Run `npx skills add ok-helloworld/vibe-pentest --all -g -y` in your terminal to install the full skill set globally. You also need Python 3.10+ and the Python dependencies listed in the README.

What vulnerabilities can vibe-pentest detect?▼

It covers SQL injection, XSS, SSRF, RCE, auth bypass, file upload and path traversal, API authorization flaws like BOLA, business logic abuse, and known CVEs matched via fingerprinting.

Is vibe-pentest legal to use?▼

Only use it on systems you own or have explicit written authorization to test. The project requires an authorization statement before any scan and forbids destructive actions on production data.

Does vibe-pentest work with Claude Code and other coding agents?▼

Yes. It follows the standard SKILL.md format and runs in Claude Code, Qoder, OpenCode, Cursor, and similar platforms that support multi-agent workflows.

Do I need security experience to use vibe-pentest?▼

No. You provide a target URL and authorization statement in plain language, and the agents handle scanning, verification, and report generation automatically.