Pentest Checklist

This is a structured checklist for running penetration tests, covering everything from initial scoping and authorization to post-test remediation. It's useful if you need to make sure you're not skipping steps in the pentest process, especially around legal agreements, stakeholder communication, and proper documentation. The skill guides you through inputs like business objectives and target environment details, then helps track deliverables throughout the engagement. Originally from zebbern's claude-code-guide and now maintained by davila7, it's more of a procedural framework than a technical tool. If you're doing pentests solo or trying to formalize your process, it keeps the administrative and planning side organized so you can focus on the actual security work.

GitHub stars: 30.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill 'Pentest Checklist' --agent claude-code

Installs into .claude/skills of the current project.

Files

Pentest Checklist

Purpose

Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities.

Inputs/Prerequisites

Clear business objectives for testing
Target environment information
Budget and timeline constraints
Stakeholder contacts and authorization
Legal agreements and scope documents

Outputs/Deliverables

Defined pentest scope and objectives
Prepared testing environment
Security monitoring data
Vulnerability findings report
Remediation plan and verification

Core Workflow

Phase 1: Scope Definition

Define Objectives

Clarify testing purpose - Determine goals (find vulnerabilities, compliance, customer assurance)
Validate pentest necessity - Ensure penetration test is the right solution
Align outcomes with objectives - Define success criteria

Reference Questions: