security-pen-testing

Audit web applications, APIs, and infrastructure for security vulnerabilities.

Updated Apr 2, 2026

Search Tags:#vulnerability assessment #penetration testing #security audit #web security #application security

Ready to run

npx skills add https://github.com/4lerman/text_evaluator --skill security-pen-testing-4lerman

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-pen-testing
Source: https://github.com/4lerman/text_evaluator/tree/main/.agents/skills/engineering-skills/security-pen-testing
Command: npx skills add https://github.com/4lerman/text_evaluator --skill security-pen-testing-4lerman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires owasp-zap, burpsuite, nmap, sqlmap, nikto, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a systematic approach to discovering and addressing security vulnerabilities in systems, applications, and infrastructure through penetration testing.

Core Features & Use Cases

OWASP Top 10 Systematic Audit: Automated checklist generation for comprehensive security assessments.
Static Analysis: Detects security vulnerabilities in code through static analysis.
Dependency Vulnerability Scanning: Identifies vulnerabilities in external libraries and dependencies.
Secret Scanning: Scans for secrets like API keys in code repositories.
API Security Testing: Identifies vulnerabilities in APIs and application backends.
Web Vulnerability Testing: Identifies common web application vulnerabilities.
Infrastructure Security: Checks cloud storage permissions, TLS configurations, and open ports.
Pen Test Report Generation: Generates structured reports for documentation and analysis.

Quick Start

Run a full penetration test using the security-pen-testing skill:

security-pen-testing run full

Frequently Asked Questions about security-pen-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a penetration test on a web application?▼

Penetration testing on web applications is performed by running automated tools and manual checks to identify vulnerabilities. This Skill executes a full security audit using OWASP ZAP and Burp Suite to detect risks and provide remediation guidance.

What is included in an OWASP Top 10 security audit?▼

An OWASP Top 10 security audit includes automated checklist generation, static code analysis, dependency vulnerability scanning, and secret scanning. It systematically assesses applications to uncover common security flaws and configuration risks.

Can I test API security and infrastructure with OWASP ZAP and Nmap?▼

Yes, OWASP ZAP and Nmap support API security testing and infrastructure checks. This Skill uses them to identify API backend vulnerabilities, scan open ports, verify TLS configurations, and check cloud storage permissions.

Do I need to install Burp Suite and Nmap before running a security audit?▼

Yes, you need to install Burp Suite, Nmap, OWASP ZAP, SQLmap, and Nikto before running a security audit. This Skill depends on these external tools to execute automated vulnerability scanning and manual penetration testing features.

What's the best way to document vulnerability assessment findings?▼

The best way to document vulnerability assessment findings is by generating structured penetration test reports. This Skill automatically compiles identified vulnerabilities, risk assessments, and remediation guidance into documentation for analysis.