pentest

Automate security assessments of AWS/Azure accounts to identify exposed resources and attack paths.

7|2|Updated Apr 3, 2026
One-click install
npx skills add https://github.com/kkmookhey/shasta --skill pentest-kkmookhey
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pentest
Source: https://github.com/kkmookhey/shasta/tree/main/.claude/skills/pentest
Command: npx skills add https://github.com/kkmookhey/shasta --skill pentest-kkmookhey

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automated security assessment to identify internet-exposed resources, attack paths, and network vulnerabilities in cloud environments.

Core Features & Use Cases

  • Discover internet-exposed resources across AWS/Azure.
  • Enumerate attack paths and potential exposures for remediation.
  • Produce structured pentest reports with exposed resources, attack paths, and network findings.

Quick Start

Run the pentest skill against your AWS/Azure account using the configured python_cmd in shasta.config.json.

Frequently Asked Questions about pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a cloud security assessment for AWS and Azure?

Automate a cloud security assessment by running a configured Python command to discover internet-exposed resources, enumerate attack paths, and identify network vulnerabilities across your AWS and Azure accounts.

What is an automated pentest for cloud environments?

An automated pentest for cloud environments is a security assessment that identifies internet-exposed resources, attack paths, and network weaknesses in AWS or Azure accounts to produce a structured JSON report.

Can I discover internet-exposed resources across my AWS and Azure accounts?

Yes, you can discover internet-exposed resources across AWS and Azure accounts by executing automated security assessments that scan your cloud configurations and enumerate potential external attack paths.

Do I need a configured Python command in shasta.config.json to run network vulnerability scans?

Yes, you need a configured Python command in shasta.config.json to execute the security assessment, which uses specific client functions to scan cloud accounts and save the network vulnerability findings.

How does the automated security assessment enumerate attack paths for remediation?

The automated security assessment enumerates attack paths by analyzing cloud resource configurations and network exposures in AWS and Azure, then structures the findings into a JSON report for remediation.

What is the best way to generate structured pentest reports for quarterly security audits?

The best way to generate structured pentest reports for quarterly audits is to run an automated security assessment that outputs a JSON-structured report containing exposed resources, attack paths, and network findings.