# pentest-skills-framework

A modular skill for reconnaissance, vulnerability checks, and result analysis through natural-language requests. It fits AI CLI penetration-testing workflows.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 327 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/pentest-skills-framework/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/pentest-skills-framework

## What it does

pentest-skills-framework turns penetration testing into separate skills for port discovery, subdomain collection, directory enumeration, and web technology identification. It also covers checks for SQL injection, XSS, and LFI. The agent maps a plain-language request to the relevant tools and reviews the returned data.

A skill can include `SKILL.md`, Python or Bash automation, reference notes, and resource files such as wordlists. The documented toolset includes `nmap`, `subfinder`, `dnsx`, `httpx`, `nuclei`, `ffuf`, `sqlmap`, `xsstrike`, and `dalfox`; the required set depends on the task. Subdomain and directory work requires the Go-based utilities, while the base setup targets Ubuntu/Debian or macOS.

The skill supports Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, and OpenCode. A selected check will fail to run when its required command-line tools are missing, so install the tools for that skill before starting.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentest-skills-framework -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/pentest-skills-framework/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/pentest-skills-framework/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentest-skills-framework -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/pentest-skills-framework/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentest-skills-framework -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/pentest-skills-framework/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills pentest-skills-framework
```

2. **Manually: put the files in place**
- File: `.github/skills/pentest-skills-framework/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentest-skills-framework -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/pentest-skills-framework
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/pentest-skills-framework/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill pentest-skills-framework -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/pentest-skills-framework/SKILL.md

## When to use it
- scan ports and identify service versions
- enumerate live subdomains for a domain
- search a web app for hidden directories
- test a URL for SQL injection
- fingerprint web application technologies

## Example prompts
- Scan `192.168.1.100`, find open ports, and identify the service versions.
- Enumerate subdomains for `example.com`, verify which ones respond, and save the results to a file.
- Check `http://target.com/page.php?id=1` for SQL injection and interpret the responses.

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 69 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md