skill CX Codex

vibe-pentest-ai-security-testing — Claude Code skill

Q: How do you install vibe-pentest-ai-security-testing in Claude Code?

Run `npx skills add reason-machines/security-skills --skill vibe-pentest-ai-security-testing -a claude-code`.

Coordinates multi-agent security testing across web apps and APIs. Identifies injection flaws, authentication issues, and outputs DOCX or HTML reports.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add reason-machines/security-skills --skill vibe-pentest-ai-security-testing -a claude-code

Open on GitHub

What vibe-pentest-ai-security-testing does

The skill orchestrates security scanning across admin portals, endpoints, and web backends. Its workflow begins with technology fingerprinting, discovers parameters via the Katana crawler, and maps the attack perimeter before running tests.

Six parallel agents handle distinct security domains, covering authorization checks, injection attempts, and business logic flaws. The tool fails without Python 3.10+, Playwright Chromium binaries, and the Katana binary in place. Verified issues receive follow-up HTTP checks before creating HTML or DOCX summaries.

What it helps with

map endpoints and parameters with the Katana crawler
test web applications for business logic flaws and IDOR
verify reported vulnerabilities with direct HTTP checks
generate technical security findings in DOCX and HTML

Example prompts for the agent

Run an automated penetration test on our staging web application.
Scan the admin endpoints for authentication flaws using vibe-pentest.
Generate an HTML security assessment report based on recent scan findings.

How to install vibe-pentest-ai-security-testing

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill vibe-pentest-ai-security-testing -a claude-code

2Manually: put the files in place

~/.claude/skills/vibe-pentest-ai-security-testing/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/vibe-pentest-ai-security-testing/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill vibe-pentest-ai-security-testing -a codex

2Manually: put the files in place

.agents/skills/vibe-pentest-ai-security-testing/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill vibe-pentest-ai-security-testing -a cursor

2Manually: put the files in place

.cursor/skills/vibe-pentest-ai-security-testing/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install reason-machines/security-skills vibe-pentest-ai-security-testing

2Manually: put the files in place

.github/skills/vibe-pentest-ai-security-testing/SKILL.md

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill vibe-pentest-ai-security-testing -a gemini-cli

2Platform CLI

gemini skills install https://github.com/reason-machines/security-skills --path skills/vibe-pentest-ai-security-testing

Manually: put the files in place

.devin/skills/vibe-pentest-ai-security-testing/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill vibe-pentest-ai-security-testing -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about vibe-pentest-ai-security-testing

How do you install vibe-pentest-ai-security-testing in Claude Code?

Run npx skills add reason-machines/security-skills --skill vibe-pentest-ai-security-testing -a claude-code.

What does vibe-pentest-ai-security-testing do?

It manages automated black-box tests across APIs and websites, orchestrating agents to discover parameters, probe vulnerabilities, and write technical reports.

Which prerequisites are needed before starting a scan?

You need Git, Python 3.10+, the required pip packages with Playwright Chromium, and the Katana crawler utility.

Similar skills

All skills for Security →

git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set69

web-security-scanner-pro A skill that teaches your agent to drive Web Security Scanner Pro: 49 modules, WAF evasion, CMS checks and HTML or PDF reports. CX Codex +1 607installs pentestcompanion-workspace This skill wires your agent into a self-hosted Pentest Companion workspace for running engagements, tools and reports. CX Codex +1 534installs email-security-auditor-cpp Validates email credentials and audits inbox authentication via SMTP and IMAP using C++. Built for authorized security testing and credential stuffing assessments. CX Codex +1 479installs agentic-security-scanner A skill that scans your code for vulnerabilities, explains findings in plain English and fixes them. Useful when AI writes code faster than you can review it. CX Codex +1 462installs pentest-toolkit-pro-html A skill that tells the agent how to drive an offline pentest toolkit: OWASP WSTG checklists, finding tracking, CVSS scoring and a printable report. Handy when results must live in one file. CX Codex +1 340installs dfyx-code-security-review This skill performs white-box static analysis of code, tracing data flows and checking security controls, configuration, and business logic. Use it for a deep project audit. CX Codex +1 338installs pentestops-dashboard This skill guides an agent through setting up a dashboard for penetration testing projects, tasks, findings, clients, and assets. Use it to organize an assessment workflow. CX Codex +1 336installs dfyx-code-security-auditor A white-box code audit skill that traces data flows and checks security weaknesses. Use it for release reviews, OWASP checks, or a deeper project assessment. CX Codex +1 334installs