← All skills
web-pentest
32 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By longwangjiang88/SusuAIOverclock-pojia (GitHub) · security · 42 stars · scanned at commit 667b2db
授权 Web 应用渗透测试编排器（PTES 七阶段 + TDA/EGATS 难度感知规划 + 浏览器优先侦察 + 迭代验证 + 双层评审 + 跨模型缺口审计 + 强制 KB 更新）。中文触发词：渗透测试、渗透、打点、漏洞挖掘、挖洞、安全评估、Web 安全测试、接口安全测试、API 安全测试、OWASP 测试、PTES、攻击面测绘、资产测绘、子域名收集、端口扫描、目录爆破、漏洞扫描、nuclei、sqlmap、burp、越权测试、逻辑漏洞、授权测试、自有资产测试、SRC 众测、渗透报告、安全审计、红队测试。English triggers: pentesting, penetration testing, web app security assessment, vulnerability assessment, OWASP testing, PTES, attack surface mapping, API security testing, pentest reporting, 'help me test this app'. NOT for network-only pentes…
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 69 places.
Show 17 more
- packed-packs/dsh/materials/skills/web-pentest/hooks/README.md, line 73
Missing → `apt install jq`. Without jq the hooks exit cleanly but write nothing. - packed-packs/dsh/materials/skills/web-pentest/hooks/log-bash.sh, line 68
echo "## [$(date +'%Y-%m-%d %H:%M:%S')] Bash [hook-logged, jq MISSING — install with: apt install jq]" \ - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 23
- Install Salesforce CLI: `npm install -g @salesforce/cli` - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 36
| **WPScan** | Core WordPress scanner | `apt install wpscan` (base install) | [GitHub](https://github.com/wpscanteam/wpscan) | 8k+ | - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 47
| **droopescan** | Drupal/Joomla/SilverStripe scanner | `pip install droopescan --break-system-packages` (base install) | [GitHub](https://github.com/SamJoan/dr - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 48
| **drupwn** | Drupal enumeration and exploitation | `pip install drupwn --break-system-packages` | [GitHub](https://github.com/immunIT/drupwn) | 500+ | - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 58
| **joomscan** | Joomla vulnerability scanner | `apt install joomscan` | [GitHub](https://github.com/OWASP/joomscan) | 1k+ (OWASP) | - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 69
| **larascan** | Laravel-specific vulnerability scanner | `pip install larascan --break-system-packages` | [GitHub](https://github.com/mhaskar/Larascan) | 500+ - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 80
| **django-doctor** | Django security and best practice checker | `pip install django-doctor --break-system-packages` | PyPI | Verified | - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 81
| **pyjwt** | JWT manipulation library (for scripted JWT testing in Python apps) | `pip install pyjwt --break-system-packages` | PyPI | 5k+ | - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 93
| **log4j-scan** | Log4Shell (CVE-2021-44228) scanner | `pip install log4j-scan --break-system-packages` or `git clone https://github.com/fullhunt/log4j-scan.gi - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 103
| **retire.js** | JS library vulnerability scanner (detects outdated libraries with known CVEs) | `npm install -g retire` | [GitHub](https://github.com/RetireJS - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 105
| **is-website-vulnerable** | Check a website's JS libraries for known vulnerabilities | `npm install -g is-website-vulnerable` | [GitHub](https://github.com/ni - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 106
| **ppfuzz** | Prototype pollution fuzzer | `go install github.com/nickvdyck/ppfuzz@latest` or `git clone https://github.com/nickvdyck/ppfuzz` | GitHub | 500+ | - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 116
| **graphql-cop** | GraphQL security audit tool | `pip install graphql-cop --break-system-packages` | [GitHub](https://github.com/dolevf/graphql-cop) | 500+ | - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 117
| **InQL** | GraphQL introspection and injection scanner (Burp extension + standalone) | `pip install inql --break-system-packages` | [GitHub](https://github.co - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 118
| **clairvoyance** | Obtain GraphQL schema even with introspection disabled | `pip install clairvoyance --break-system-packages` | [GitHub](https://github.com/n
and 49 more places
Changes files outside its own folder
The author does not mention this.
Found in 13 places.
Show 10 more
- packed-packs/dsh/materials/skills/web-pentest/hooks/README.md, line 47
mv .claude/settings.json.new .claude/settings.json - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 37
| **wp-cli** | WordPress admin CLI (if shell access gained) | `curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar && chmod +x wp- - packed-packs/dsh/materials/skills/web-pentest/references/adaptive-tooling.md, line 70
| **phpggc** | PHP deserialization payload generator (GadgetChains) | `git clone https://github.com/ambionics/phpggc.git /opt/phpggc && ln -sf /opt/phpggc/phpgg - packed-packs/dsh/materials/skills/web-pentest/references/ptes-phases.md, line 27
echo 'export SECLISTS="/opt/SecLists"' >> ~/.bashrc - packed-packs/dsh/materials/skills/web-pentest/scripts/setup.sh, line 265
[ -f "$bin" ] && ln -sf "$bin" /usr/local/bin/ 2>/dev/null - packed-packs/dsh/materials/skills/web-pentest/scripts/setup.sh, line 291
[ -f /opt/tplmap/tplmap.py ] && ln -sf /opt/tplmap/tplmap.py /usr/local/bin/tplmap - packed-packs/dsh/materials/skills/web-pentest/scripts/setup.sh, line 304
[ -f /opt/jwt_tool/jwt_tool.py ] && ln -sf /opt/jwt_tool/jwt_tool.py /usr/local/bin/jwt_tool - packed-packs/dsh/materials/skills/web-pentest/scripts/setup.sh, line 351
[ -f "$HOME/.cargo/bin/x8" ] && ln -sf "$HOME/.cargo/bin/x8" /usr/local/bin/x8 - packed-packs/dsh/materials/skills/web-pentest/scripts/setup.sh, line 360
[ -f "$HOME/.cargo/bin/h3spec" ] && ln -sf "$HOME/.cargo/bin/h3spec" /usr/local/bin/h3spec - packed-packs/dsh/materials/skills/web-pentest/scripts/setup.sh, line 408
cat > /etc/profile.d/web-pentest-skill.sh << 'PROFILE'
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 8 places.
Show 5 more
- packed-packs/dsh/materials/skills/web-pentest/references/recipes/injection/other.md, line 199
sh=localLoad("child_process").exec('id')}()} - packed-packs/dsh/materials/skills/web-pentest/references/recipes/injection/other.md, line 227
When user input flows into `system()`, `exec()`, `os.system()`, `subprocess.call(shell=True)`: - packed-packs/dsh/materials/skills/web-pentest/references/recipes/injection/other.md, line 418
{"__proto__":{"block":{"type":"Text","line":"process.mainModule.require('child_process').execSync('id')"}}} - packed-packs/dsh/materials/skills/web-pentest/scripts/measure_bundle_sizes.py, line 231
result = subprocess.run(cmd, capture_output=True, text=True, timeout=30, - packed-packs/dsh/materials/skills/web-pentest/scripts/measure_bundle_sizes.py, line 233
except subprocess.TimeoutExpired:
Sends data to these websites: raw.githubusercontent.com, github.com, target, evil.com, attacker.{{domain}}, api.mail.tm
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 302 places.
Show 17 more
- packed-packs/dsh/materials/skills/web-pentest/references/destructive-ops.md, line 161
- `curl -X POST /api/password-reset?user=<real_username>` (credential_reset_real_user) without approval - packed-packs/dsh/materials/skills/web-pentest/references/destructive-ops.md, line 288
"verification_action": "curl -u charlie:test https://target/api/me", - packed-packs/dsh/materials/skills/web-pentest/references/kb-enforcement.md, line 112
pattern-matched against ~15 destructive-command regexes (curl -X DELETE, SQL DROP, - packed-packs/dsh/materials/skills/web-pentest/references/recipes/ai-llm.md, line 241
curl -X POST {{chat_endpoint}} -H "Content-Type: application/json" \ - packed-packs/dsh/materials/skills/web-pentest/references/recipes/ai-llm.md, line 255
curl -X POST {{chat_endpoint}} -d '{"message":"test"}' & - packed-packs/dsh/materials/skills/web-pentest/references/recipes/ai-llm.md, line 409
curl -X POST {{chat_endpoint}} \ - packed-packs/dsh/materials/skills/web-pentest/references/recipes/ai-llm.md, line 415
curl -N -X POST {{chat_endpoint}} \ - packed-packs/dsh/materials/skills/web-pentest/references/recipes/business-logic.md, line 14
for i in $(seq 1 20); do curl -s "{{url}}" -H "Cookie: {{session}}" & done; wait - packed-packs/dsh/materials/skills/web-pentest/references/recipes/client-side.md, line 24
1. REFLECT: curl -H "Origin: https://evil.com" {{url}} — check Access-Control-Allow-Origin - packed-packs/dsh/materials/skills/web-pentest/references/recipes/client-side.md, line 25
2. NULL ORIGIN: curl -H "Origin: null" {{url}} — accepted? - packed-packs/dsh/materials/skills/web-pentest/references/recipes/client-side.md, line 26
3. SUBDOMAIN WILDCARD: curl -H "Origin: https://attacker.{{domain}}" — prefix/suffix accepted? - packed-packs/dsh/materials/skills/web-pentest/references/recipes/client-side.md, line 37
1. CHECK: curl -I {{url}} — X-Frame-Options present? CSP frame-ancestors? - packed-packs/dsh/materials/skills/web-pentest/references/recipes/client-side.md, line 53
5. EVIDENCE: curl -v showing 302 to attacker domain - packed-packs/dsh/materials/skills/web-pentest/references/recipes/client-side.md, line 61
1. CHECK: curl -I {{url}} — examine all response headers - packed-packs/dsh/materials/skills/web-pentest/references/recipes/client-side.md, line 66
5. EVIDENCE: curl -I output showing missing/weak headers - packed-packs/dsh/materials/skills/web-pentest/references/recipes/email.md, line 42
curl -s https://api.mail.tm/domains | jq - packed-packs/dsh/materials/skills/web-pentest/references/recipes/email.md, line 43
DOMAIN=$(curl -s https://api.mail.tm/domains | jq -r '.["hydra:member"][0].domain')
and 282 more places
Can call paid AI services billed to you
The author does not mention this.
Found in 3 places.
Contains code that is hidden or hard to read
The author does not mention this.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'web-pentest' ] || [ -L ~/.agents/skills/'web-pentest' ]; then echo 'A skill folder named web-pentest already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/longwangjiang88/SusuAIOverclock-pojia' "$d" && git -C "$d" checkout --quiet '667b2db2746516eae05412bbdcad77515d528f37' -- 'packed-packs/dsh/materials/skills/web-pentest' && mkdir -p ~/.agents/skills && cp -R "$d"/'packed-packs/dsh/materials/skills/web-pentest' ~/.agents/skills/'web-pentest' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'web-pentest' ~/.claude/skills/'web-pentest' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for longwangjiang88/SusuAIOverclock-pojia shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/longwangjiang88/SusuAIOverclock-pojia/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 667b2db | 67 |