pentest-validation

What problem does it solve?

This Skill automates the validation of security findings by orchestrating a graduated exploitation pipeline, ensuring that only genuinely exploitable vulnerabilities are reported and eliminating false positives.

Core Features & Use Cases

• Graduated Exploitation: Employs a multi-tiered approach (pattern matching, payload testing, full exploitation) to validate findings efficiently.
• "No Exploit, No Report": Enforces a strict policy, only reporting vulnerabilities with demonstrable proof-of-concept.
• Automated Validation: Integrates SAST, DAST, code review, and exploitation into a cohesive workflow.
• Use Case: When a security scanner flags a potential SQL injection, this Skill will attempt to craft and execute a proof-of-concept exploit against a staging environment, confirming its validity before it's added to a report.

Quick Start

Use the pentest-validation skill to validate security findings against the staging URL 'https://staging.app.com'.