ethical-hacking-agent-skills

In the author's own words, from each skill's SKILL.md.

• pt-analysis-reporting

  Produces penetration test reports with executive summary, technical findings, and remediation guidance. Use when consolidating test evidence, prioritizing risk, and preparing stakeholder-ready deliverables.

  skills/pt-analysis-reporting/SKILL.md on GitHub (opens in a new tab)

• pt-embedded-device-assessment

  Performs authorized security assessment of embedded and IoT devices across hardware, firmware, interfaces, and update mechanisms. Use when testing device boot flows, debug interfaces, firmware integrity, and local/network attack surfaces.

  skills/pt-embedded-device-assessment/SKILL.md on GitHub (opens in a new tab)

• pt-fuzzing-binary-protocol

  Performs authorized fuzz testing of binary formats and network protocols to uncover parser vulnerabilities, memory safety defects, and denial-of-service conditions. Use when assessing protocol handlers, file parsers, and service robustness against malformed inputs.

  skills/pt-fuzzing-binary-protocol/SKILL.md on GitHub (opens in a new tab)

• pt-fuzzing-web-api

  Performs authorized fuzzing of web applications and APIs to discover input validation failures, parser bugs, and stability issues. Use when testing HTTP endpoints, request parameters, payload handling, and error behavior under malformed or unexpected inputs.

  skills/pt-fuzzing-web-api/SKILL.md on GitHub (opens in a new tab)

• pt-gaining-access

  Guides controlled exploitation of validated vulnerabilities to measure real-world impact. Use when the user requests proof-of-concept validation, privilege escalation testing, or attack path confirmation in an authorized environment.

  skills/pt-gaining-access/SKILL.md on GitHub (opens in a new tab)

• pt-lotl-techniques

  Demonstrates Living-off-the-Land (LotL) techniques using native OS tools to simulate realistic threat actor behavior during authorized penetration tests. Use when proving attack feasibility without custom malware, testing detection coverage, and validating what a real adversary could achieve with only built-in system capabilities.

  skills/pt-lotl-techniques/SKILL.md on GitHub (opens in a new tab)

• pt-maintaining-access

  Evaluates whether an attacker could retain foothold and move laterally after initial compromise, within strict authorization limits. Use when testing persistence, session resilience, and detection/response effectiveness during a pen test.

  skills/pt-maintaining-access/SKILL.md on GitHub (opens in a new tab)

• pt-nuclei-template-creation

  Creates Nuclei YAML templates for vulnerability detection across HTTP, DNS, TCP, SSL, and other protocols. Use when converting a confirmed vulnerability, misconfiguration, or exposure into a reusable automated check — for example, turning a manual finding into a detection rule, writing a CVE check, or codifying a technology fingerprint.

  skills/pt-nuclei-template-creation/SKILL.md on GitHub (opens in a new tab)

• pt-planning-recon

  Defines penetration test scope and performs authorized reconnaissance using passive and active methods. Use when planning a test engagement, collecting target intelligence, building asset inventories, or preparing recon findings.

  skills/pt-planning-recon/SKILL.md on GitHub (opens in a new tab)

• pt-post-exploitation

  Performs authorized post-exploitation activities to assess impact, lateral movement paths, credential exposure, and detection gaps after initial compromise. Use when a foothold has been validated and the test requires controlled impact expansion analysis.

  skills/pt-post-exploitation/SKILL.md on GitHub (opens in a new tab)

• pt-report-creation

  Creates penetration test deliverables for executive and technical audiences, including prioritized findings and remediation plans. Use when drafting, structuring, or finalizing pen test reports from collected evidence.

  skills/pt-report-creation/SKILL.md on GitHub (opens in a new tab)

• pt-scanning

  Performs authorized security scanning using static, dynamic, and vulnerability-focused methods. Use when mapping exposed services, profiling application behavior, and identifying known weaknesses for validation.

  skills/pt-scanning/SKILL.md on GitHub (opens in a new tab)

• pt-web-application-assessment

  Performs authorized web application and API penetration testing with focus on OWASP-style risks and business logic flaws. Use when assessing websites, web APIs, authentication flows, session handling, and input validation.

  skills/pt-web-application-assessment/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• superpowersby obra An agentic skills framework & software development methodology that works. 300k stars · 15 skills
• skillsby mattpocock Skills for Real Engineers. Straight from my .agents directory. 293k stars · 30 skills
• ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod… 280k stars · 30 skills
• reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries. 270k stars · 1 skill
• andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls. 220k stars · 1 skill
• skillsby anthropics Public repository for Agent Skills 181k stars · 19 skills