Scan web apps, APIs, and codebases for verified exploitable vulnerabilities.
npx skills add https://github.com/Houseofmvps/ultraship --skill pentest-houseofmvps
Please help me install this Agent Skill. Skill: pentest Source: https://github.com/Houseofmvps/ultraship/tree/main/skills/pentest Command: npx skills add https://github.com/Houseofmvps/ultraship --skill pentest-houseofmvps
Manual penetration testing is slow, inconsistent, and often misses critical vulnerabilities or reports false positives, leaving applications exposed to preventable attacks.
Use the pentest skill to run a full verified security audit on your deployed application at https://your-production-app.com.
High-intent search queries and answers about installing and using this skill.
To run a penetration test without false positives, you need a verified security audit approach that validates every finding with a proof of concept. This ensures reported vulnerabilities like SQL injection and XSS are exploitable, eliminating unconfirmed guesses.
Yes, you can scan local codebases and GitHub repositories for exposed secrets. Full-surface security scanning targets these environments alongside deployed web apps to identify exploitable flaws and misconfigurations before deployment.
The best way to verify vulnerability scanning results is through exploit verification. This process validates findings by generating a proof of concept, ensuring zero false positives for issues like authentication bypasses or exposed secrets.
Penetration testing works for pre-deployment security audits on browser clients. It tests browser clients, APIs, and web apps to catch critical issues like injection flaws and exposed secrets before malicious actors can exploit them.
cmndcntrlcyberAutomate subdomain enumeration, live host identification, and URL crawling for web reconnaissance.
aakash-dharAudit code for injection attacks, exposed secrets, and authentication flaws.
NY1024Audit OpenClaw agent skills for security vulnerabilities and malicious behavior.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
