Updated today
by hassan-algo
open-sesame
🔓 An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWASP WSTG, validates findings, and writes dev + stakeholder reports (PDF).
57 GitHub stars (57)
+57 in 2 days
- 2 skills (2 skills found in its SKILL.md files)
- 9 forks (9 forks)
- Today last update (Last updated today)
Install
Skills CLI
npx skills add hassan-algo/open-sesame
Asks which skills and agents to install. Just one: npx skills add hassan-algo/open-sesame --skill net-pentest — add -g for every project.
Claude Code
git clone https://github.com/hassan-algo/open-sesamecp -r "open-sesame/.claude/skills/net-pentest" ~/.claude/skills/
Copies the net-pentest skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add hassan-algo/open-sesame
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
net-pentest
Guides authorized network and infrastructure penetration testing — external perimeter and internal/Active Directory — from scoping through reporting. Use this skill whenever the user is testing a network, hosts, or infrastructure they're authorized to assess: their own network, a client engagement with a signed scope, or a lab (HackTheBox, TryHackMe, GOAD, a local range). Trigger it for requests…
.claude/skills/net-pentest/SKILL.md on GitHub (opens in a new tab) -
web-pentest
Guides authorized web-application penetration testing from recon through reporting. Use this skill whenever the user is testing a website or web app for security issues — assessing their own site or staging environment, a client engagement with a signed scope, a bug-bounty target in scope, a CTF, or a practice lab (PortSwigger Academy, OWASP Juice Shop, DVWA, HackTheBox). Trigger it for requests…
.claude/skills/web-pentest/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.