Agent skill · security · aradotso
pentesting-checklist-security-assessment
Interactive security assessment checklist covering 23 platforms with 1,000+ checks for penetration testing, bug bounty, and security audits.
Why this skill is useful
Provides a comprehensive checklist with over 1,000 specific security checks tailored for various platforms that the AI wouldn't generate on its own.
What it needs
Requires npm installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Pentesting Checklist Security Assessment Skill by ara.so — Security Skills collection. Overview PentestingChecklist is a comprehensive, client-side security assessment framework covering 23 platforms (Web, API, Mobile, Cloud, Active Directory, Kubernetes, LLM, and more) with over 1,000 security checks. It runs entirely in the browser with no backend, storing all progress, notes, and findings in localStorage. Key Features: Hierarchical checklist: Platform → Category → Technology → Check Global search across all content (⌘K/Ctrl+K) Progress tracking with status (Open/Closed/N/A) Per-check notes for evidence and payloads Severity-based filtering (Critical → Info) Export to Markdown, CSV, Excel, JSON Import JSON to resume assessments Live Tool: https://checklist.m14r41.in/ Installation & Setup This is a web-based application. For local development or self-hosting: Project Structure Core Data Structure The checklist follows a four-level hierarchy: Using the Checklist (Browser Interface) Navigation Global Search Keyboard shortcut: ⌘K (Mac) or Ctrl+K (Windows/Linux) Search across: Platform names Category names Technology names Check titles and descriptions Tags, tools, references Progress Tracking Filtering by Severity Export & Import Export Formats Import JSON Assessment Platform-Specific Examples Web Application Security API Security Active Directory Assessment LocalStorage Management Progress Calculation Common Patterns Filtering Open Findings Search Implementation Troubleshooting LocalStorage Issues Data Migration Browser Compatibility Best Practices 1. Export regularly: Export your assessment data to JSON to prevent data loss 2. Use severity filters: Focus on critical and high findings first 3. Add detailed notes: Include payloads, URLs, and evidence in check notes 4. Track N/A items: Mark irrelevant checks as N/A to get accurate progress metrics 5. Search effectively: Use tags and tool names in search for faster navigation 6. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/pentesting-checklist-security-assessment