skills.rest
4lerman
4lermanCOMMUNITY
Explore all skills by this author →
GitHub

security-pen-testing

Audit web applications, APIs, and infrastructure for security vulnerabilities.

Updated Apr 2, 2026
Search Tags:#vulnerability assessment#penetration testing#security audit#web security#application security
One-click install
npx skills add https://github.com/4lerman/text_evaluator --skill security-pen-testing-4lerman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-pen-testing
Source: https://github.com/4lerman/text_evaluator/tree/main/.agents/skills/engineering-skills/security-pen-testing
Command: npx skills add https://github.com/4lerman/text_evaluator --skill security-pen-testing-4lerman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires owasp-zap, burpsuite, nmap, sqlmap, nikto, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a systematic approach to discovering and addressing security vulnerabilities in systems, applications, and infrastructure through penetration testing.

Core Features & Use Cases

  • OWASP Top 10 Systematic Audit: Automated checklist generation for comprehensive security assessments.
  • Static Analysis: Detects security vulnerabilities in code through static analysis.
  • Dependency Vulnerability Scanning: Identifies vulnerabilities in external libraries and dependencies.
  • Secret Scanning: Scans for secrets like API keys in code repositories.
  • API Security Testing: Identifies vulnerabilities in APIs and application backends.
  • Web Vulnerability Testing: Identifies common web application vulnerabilities.
  • Infrastructure Security: Checks cloud storage permissions, TLS configurations, and open ports.
  • Pen Test Report Generation: Generates structured reports for documentation and analysis.

Quick Start

Run a full penetration test using the security-pen-testing skill:

security-pen-testing run full

Frequently Asked Questions about security-pen-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a penetration test on a web application?▼

Penetration testing on web applications is performed by running automated tools and manual checks to identify vulnerabilities. This Skill executes a full security audit using OWASP ZAP and Burp Suite to detect risks and provide remediation guidance.

What is included in an OWASP Top 10 security audit?▼

An OWASP Top 10 security audit includes automated checklist generation, static code analysis, dependency vulnerability scanning, and secret scanning. It systematically assesses applications to uncover common security flaws and configuration risks.

Can I test API security and infrastructure with OWASP ZAP and Nmap?▼

Yes, OWASP ZAP and Nmap support API security testing and infrastructure checks. This Skill uses them to identify API backend vulnerabilities, scan open ports, verify TLS configurations, and check cloud storage permissions.

Do I need to install Burp Suite and Nmap before running a security audit?▼

Yes, you need to install Burp Suite, Nmap, OWASP ZAP, SQLmap, and Nikto before running a security audit. This Skill depends on these external tools to execute automated vulnerability scanning and manual penetration testing features.

What's the best way to document vulnerability assessment findings?▼

The best way to document vulnerability assessment findings is by generating structured penetration test reports. This Skill automatically compiles identified vulnerabilities, risk assessments, and remediation guidance into documentation for analysis.

Related Skills

Explore More Software Engineering Skills→
AndyAnh174AndyAnh174

Security Scanning Tools

Guide security scanning tools for network, web, and cloud assessments.

Community
Advanced
damacusdamacus
2

security-reviewer

Review codebases for vulnerabilities and generate structured security audit reports.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

app-security

Scan application code for vulnerabilities and hardcoded secrets.

Community
Advanced
vladm3105vladm3105
16

security-audit

Identify security vulnerabilities across code, dependencies, infrastructure, and configurations.

Community
Advanced