Automate penetration testing across web, CVE, cloud, AI, and internal network assessments.
npx skills add https://github.com/hanc00l/nemo-agent --skill pentest-hanc00l
Please help me install this Agent Skill. Skill: pentest Source: https://github.com/hanc00l/nemo-agent/tree/main/claude-code/.claude/skills/pentest Command: npx skills add https://github.com/hanc00l/nemo-agent --skill pentest-hanc00l
This Skill provides a structured, end‑to‑end workflow for authorized security assessments and CTF challenges, eliminating the need to manually coordinate reconnaissance, vulnerability testing, exploitation, and reporting across multiple domains.
Use the pentest skill to automatically enumerate a target, test for known vulnerabilities, and generate a concise report linked to the challenge code.
High-intent search queries and answers about installing and using this skill.
To automate penetration testing for web and internal networks, this Skill coordinates reconnaissance, vulnerability testing, and exploitation across multiple zones, generating a concise report linked to your challenge code.
Yes, you can automate CTF workflows by fetching challenges, managing timeouts, requesting hints, and submitting flags. It maintains detailed reports throughout the competition using the integrated competition API.
Performing CVE exploitation and cloud security assessments requires access to toolset APIs, browser automation, terminal sessions, and a persistent note management system to execute reconnaissance and keep findings organized.
Yes, the penetration testing suite supports AI infrastructure attacks alongside web, CVE, cloud, and internal network assessments, providing a structured end-to-end workflow for authorized security evaluations across these domains.
The best way to organize reconnaissance findings during a security audit is using the integrated persistent note system, which links exploitation results and vulnerability testing data directly to your reporting workflow.
Automated penetration testing requires authorized access to target systems and external toolset APIs; unauthorized scanning is unsupported, and successful exploitation depends on the target environment's configuration and accessible browser or terminal sessions.
tharunramagiriControl live iTerm2 terminal sessions with JSON outputs.
igbuendAnalyze SARIF 2.1.0 files to generate vulnerability reports with CVSS scoring.
brucesongsCapture timestamped, tamper-evident terminal commands with status markers during pentests.
rajyeole6Conduct authorized penetration testing across network, web, and cloud infrastructure.
