Plan authorized penetration tests and generate assessment reports for web, API, and infrastructure targets.
npx skills add https://github.com/79yuuki/dotfiles --skill pentest-79yuuki
Please help me install this Agent Skill. Skill: pentest Source: https://github.com/79yuuki/dotfiles/tree/main/claude/skills/pentest Command: npx skills add https://github.com/79yuuki/dotfiles --skill pentest-79yuuki
This Skill helps security teams and developers perform structured penetration-test planning and verification without losing scope control or missing common security checks.
Use the pentest skill to perform an authorized security assessment of my approved web application target and generate a report.
High-intent search queries and answers about installing and using this skill.
An authorized penetration test validates approved targets through scope files before executing tiered scans, header analysis, and vulnerability checks to produce an assessment report with evidence capture.
Tiered security assessment organizes reconnaissance, API discovery, and vulnerability detection across basic, intermediate, and advanced workflows to systematically identify configuration issues and prompt injection risks.
Yes, scope-controlled vulnerability assessment integrates nmap for network reconnaissance and sqlmap for SQL injection detection, enforcing authorization guardrails before executing validation scripts on approved targets.
Yes, TLS analysis requires openssl and testssl.sh to execute cryptographic checks and certificate validation as part of intermediate security verification workflows on authorized infrastructure targets.
Prompt injection detection runs as part of advanced tiered security assessment workflows, applying validation scripts to identify malicious input patterns and configuration issues in web application targets.
Authorization guardrails validate approved targets against scope files before testing to ensure legal compliance, prevent unauthorized scanning, and maintain evidence capture integrity for assessment reports.
EntroVyxIdentify and validate Kubernetes and Docker security misconfigurations.
dapperdiversGenerate structured markdown penetration test reports from JSON security scan findings.
zebbernAutomate red-team reconnaissance and vulnerability discovery workflows.
SkobynDetect TLS/SSL and DNS security vulnerabilities using testssl.sh, sslyze, dig, and curl.
