Agent skill · security · alirezarezvani
security-pen-testing
Authorized penetration testing of an app or API: vulnerability scans, OWASP Top 10 checks, dependency audits and a pentest report. Use whenever the user asks if their app is secure or hackable, wants a security scan or a pentest report.
Why this skill is useful
Adds specific automation scripts for vulnerability scanning and detailed OWASP Top 10 audit procedures that the AI wouldn't reliably generate on its own.
What it needs
Requires python installed locally. About 7k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
Security Penetration Testing Hands-on offensive security testing skill for finding vulnerabilities before attackers do. This is NOT compliance checking (see senior-secops) or security policy writing (see senior-security) — this is about systematic vulnerability discovery through authorized testing. --- Table of Contents Overview OWASP Top 10 Systematic Audit Static Analysis Dependency Vulnerability Scanning Secret Scanning API Security Testing Web Vulnerability Testing Infrastructure Security Pen Test Report Generation Responsible Disclosure Workflow Workflows Anti-Patterns Cross-References --- Overview What This Skill Does This skill provides the methodology, checklists, and automation for offensive security testing — actively probing systems to discover exploitable vulnerabilities. It covers web applications, APIs, infrastructure, and supply chain security. Distinction from Other Security Skills Skill Focus Approach ------- ------- ---------- security-pen-testing (this) Finding vulnerabilities Offensive — simulate attacker techniques senior-secops Security operations Defensive — monitoring, incident response, SIEM senior-security Security policy Governance — policies, frameworks, risk registers skill-security-auditor CI/CD gates Automated — pre-merge security checks Prerequisites All testing described here assumes written authorization from the system owner. Unauthorized testing is illegal under the CFAA and equivalent laws worldwide. Always obtain a signed scope-of-work or rules-of-engagement document before starting. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/security-pen-testing--16e198