Penetration Testing

A structured approach to ethical hacking that covers the essentials: SQL injection testing, automated scanning, and proper documentation with severity scoring. It includes a Python framework for organizing findings with CVSS scores and remediation guidance, plus automation scripts for tools like Burp Suite. The best practices section is actually useful here, emphasizing the obvious but critical stuff like getting written authorization and defining scope before you start poking at systems. Good for formalizing your pentest workflow or building repeatable security assessments. Just remember this gives you the structure, not the exploit knowledge itself.

skills.sh installs: 1.1K
GitHub stars: 379
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aj-geddes/useful-ai-prompts --skill penetration-testing --agent claude-code

Installs into .claude/skills of the current project.

Files

Overview

Systematic security testing to identify, exploit, and document vulnerabilities in applications, networks, and infrastructure through simulated attacks.

When to Use

Pre-production security validation
Annual security assessments
Compliance requirements (PCI-DSS, ISO 27001)
Post-incident security review
Third-party security audits
Red team exercises

Quick Start

Minimal working example:

# pentest_framework.py
import requests
import socket
import subprocess
import json
from typing import List, Dict
from dataclasses import dataclass, asdict
from datetime import datetime

@dataclass
class Finding:
    severity: str
    category: str
    target: str
    vulnerability: str
    evidence: str
    remediation: str
    cvss_score: float

class PenetrationTester:
    def __init__(self, target: str):
        self.target = target
        self.findings: List[Finding] = []

SKILL.md on GitHub