web-pentest
67 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
Phase 1b/3 conditional third-party web depth — stack ID, dir enum, auth, input validation, logic flaws. Use after pentester-playwright / pentester-src-hunter Skill-gate for web surface depth. Not a full PTES replacement. Prefer Schema products + phases 1b→3.
What this skill can do
Sends data to these websites: evil.com, target.com, attacker.com
Contains code that is hidden or hard to read
Runs commands on your computer
Safer alternatives
- 100 Low riskperforming-web-application-penetration-test
- 97 Low riskweb-pentest
- 100 Low riskshiyi-pentest-gate
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'web-pentest' ] || [ -L ~/.agents/skills/'web-pentest' ]; then echo 'A skill folder named web-pentest already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/fb0sh/pentester' "$d" && git -C "$d" checkout --quiet '97a6d9a6d574a746c3d53d6150440074035a3b0a' -- '.agents/skills/third-party/web-pentest' && mkdir -p ~/.agents/skills && cp -R "$d"/'.agents/skills/third-party/web-pentest' ~/.agents/skills/'web-pentest' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'web-pentest' ~/.claude/skills/'web-pentest' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/fb0sh/pentester/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-11 | 97a6d9a | 67 |