pentest-exploit-validation

Validate security findings through proof-driven exploitation with a four-level evidence system.

299|56|Updated Jan 13, 2026
One-click install
npx skills add https://github.com/jd-opensource/JoySafeter --skill pentest-exploit-validation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pentest-exploit-validation
Source: https://github.com/jd-opensource/JoySafeter/tree/main/skills/pentest-exploit-validation
Command: npx skills add https://github.com/jd-opensource/JoySafeter --skill pentest-exploit-validation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a structured framework to validate security findings through proof-driven exploitation, using a four-level evidence system to differentiate between potential and confirmed issues.

Core Features & Use Cases

  • Four-level evidence model guides classification (POTENTIAL, EXPLOITED, EXPLOITED CRITICAL) with reproducible proof.
  • Queue-driven validation ingests exploitation queues from white-box reviews and sequences injections, XSS, SSRF, and related vectors for consolidated assessment.
  • Mandatory evidence templates drive consistent collection, documentation, and audit-ready reporting across findings and workflows.
  • Structured workflows define type-specific validation paths and reference workflows to ensure repeatable results in security testing programs.

Quick Start

Load a finding from the exploitation queue and start the four-level evidence validation workflow to obtain reproducible proof and classification.

Frequently Asked Questions about pentest-exploit-validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate pentest findings to differentiate false positives from exploited vulnerabilities?

Structured vulnerability validation applies a 4-level evidence system to classify findings as EXPLOITED, POTENTIAL, or FALSE_POSITIVE. It sequences vectors like injections, XSS, and SSRF from exploitation queues to perform structured exploitation with bypass exhaustion and collect mandatory evidence.

What is the best way to collect audit-ready evidence for security vulnerabilities?

Mandatory evidence templates drive consistent collection and documentation for audit-ready reporting across findings. These templates ensure type-specific validation paths produce reproducible proof alongside structured workflows for repeatable security testing results.

Does this vulnerability validation workflow support testing with sqlmap, Burp Suite, and nuclei?

Yes, this validation workflow supports environments using tools like sqlmap, Burp Suite, Playwright, and nuclei. It integrates documented workflows to ensure rigorous, reproducible validation results across these standard cybersecurity testing tools.

How do I perform bypass exhaustion during exploitation queue validation?

Queue-driven validation ingests exploitation queues from white-box reviews and sequences injections, XSS, and SSRF vectors for consolidated assessment. Structured workflows define type-specific validation paths that apply bypass exhaustion to confirm vulnerabilities through reproducible proof.

Can I use this framework to validate security findings from white-box code review queues?

Yes, the framework ingests exploitation queues directly from white-box code reviews to validate security findings. It applies a four-level evidence model through structured exploitation with bypass exhaustion, classifying each finding with mandatory evidence collection.