Agent skill · security · aj-geddes
penetration-testing
Ethical hacking and security testing methodologies using penetration testing tools, exploit frameworks, and manual security validation. Use when assessing application security posture and identifying exploitable vulnerabilities.
Why this skill is useful
Provides domain-specific knowledge and automation scripts for penetration testing that the AI wouldn't reliably generate on its own.
What it needs
Requires burp-suite installed locally. About 1k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
Penetration Testing Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Systematic security testing to identify, exploit, and document vulnerabilities in applications, networks, and infrastructure through simulated attacks. When to Use Pre-production security validation Annual security assessments Compliance requirements (PCI-DSS, ISO 27001) Post-incident security review Third-party security audits Red team exercises Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- Automated Penetration Testing Framework Automated Penetration Testing Framework Burp Suite Automation Script Burp Suite Automation Script Best Practices ✅ DO Get written authorization Define clear scope Use controlled environments Document all findings Follow responsible disclosure Provide remediation guidance Verify fixes after patching Maintain chain of custody ❌ DON'T Test production without approval Cause service disruption Exfiltrate sensitive data Share findings publicly Exceed authorized scope Use destructive payloads
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/penetration-testing