# autopentestx-automated-pentesting

This skill automates reconnaissance, vulnerability checks, and security reports. Use it to assess hosts, target lists, and web applications.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 1100 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/autopentestx-automated-pentesting/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/autopentestx-automated-pentesting

## What it does

autopentestx-automated-pentesting brings a Python-based pentesting tool into the agent workflow. It can inspect ports, identify services and operating systems, and detect common vulnerabilities. Web checks cover SQL injection, XSS, and directory traversal.

The skill supports single targets, target files, and selected scan modules. Results can be turned into PDF or HTML reports, while persistent options can be stored in `config.json`, including enabled modules and the output directory. Python 3.8 or later and the packages from `requirements.txt` are required. Linux is recommended, and some scan features need root or sudo access.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill autopentestx-automated-pentesting -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/autopentestx-automated-pentesting/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/autopentestx-automated-pentesting/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill autopentestx-automated-pentesting -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/autopentestx-automated-pentesting/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill autopentestx-automated-pentesting -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/autopentestx-automated-pentesting/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills autopentestx-automated-pentesting
```

2. **Manually: put the files in place**
- File: `.github/skills/autopentestx-automated-pentesting/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill autopentestx-automated-pentesting -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/autopentestx-automated-pentesting
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/autopentestx-automated-pentesting/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill autopentestx-automated-pentesting -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/autopentestx-automated-pentesting/SKILL.md

## When to use it
- check a host for exposed ports and services
- detect common vulnerabilities on a target
- test a web application for SQL injection and XSS
- scan several hosts from `targets.txt`
- turn findings into a PDF or HTML report

## Example prompts
- Run an automated security assessment against `192.168.1.100` and create an HTML report.
- Scan every target in `targets.txt` using reconnaissance and vulnerability modules.
- Test this web application for SQL injection, XSS, and directory traversal, then generate a report.

## Similar
- [ios-pentesting-tricks](https://affpapa.org/en/nevibecode/skills/ios-pentesting-tricks.md) — skill · 3700 installs
- [kubernetes-pentesting](https://affpapa.org/en/nevibecode/skills/kubernetes-pentesting.md) — skill · 3700 installs
- [pentesting-with-aws-security-agent](https://affpapa.org/en/nevibecode/skills/pentesting-with-aws-security-agent.md) — skill · 1500 installs
- [security-pen-testing](https://affpapa.org/en/nevibecode/skills/security-pen-testing.md) — skill · 834 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/security-audit.md) — skill · 673 installs
- [vulnerability-scanning](https://affpapa.org/en/nevibecode/skills/vulnerability-scanning.md) — skill · 611 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 69 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md