Updated 2w ago
by Arenbai
SecSkills
面向 Claude Code 的专业渗透测试技能模块。严格遵循 PTES 标准,覆盖信息收集、漏洞利用、后渗透与免杀规避全阶段。后续不在更新skill,如需使用建议二开。
259 GitHub stars (259)
+11 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | +1 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | +1 |
| Oct 9 | +1 |
| Oct 10 | +2 |
| Oct 11 | 0 |
| Oct 12 | +1 |
| Oct 13 | 0 |
| Oct 14 | +2 |
| Oct 15 | +2 |
| Oct 16 | +1 |
- 1 skill (1 skills found in its SKILL.md files)
- 29 forks (29 forks)
- 2w ago last update (Last updated 2w ago)
Install
Skills CLI
npx skills add Arenbai/SecSkills
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/Arenbai/SecSkillscp -r "SecSkills" ~/.claude/skills/SecSkills
Copies the secskills skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add Arenbai/SecSkills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
secskills
渗透测试实战技能 v1.3.0。覆盖信息收集、全类漏洞发现(注入全家桶/SSRF/文件类/反序列化/SSTI/越权逻辑/CSRF)、漏洞利用、后渗透、免杀全流程。 已剔除无危害噪音项(明文传输/CORS/响应头缺失等),只报告有实际危害证据的漏洞。 当用户给出具体目标 (IP/域名/URL) 且意图是攻击/利用/拿权限时触发。 不触发: 概念讨论、蓝队防御、代码审计、CVE文档查询。
SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.