This walks you through the entire penetration testing lifecycle, from scoping and budgeting through execution and remediation. It covers choosing between test types (external, internal, web app, red team), prepping environments without wasting pentest time on obvious vulns, selecting qualified testers with the right creds, and setting up proper monitoring so your SOC doesn't freak out during authorized testing. The checklists are genuinely thorough, covering things people forget like notifying cloud providers and freezing deployments. If you're running your first pentest or trying to standardize how your org handles security assessments, this gives you the framework to avoid common mistakes like inadequate scoping or skipping the remediation phase.

skills.sh installs
634
GitHub stars
43.1K
last updated
Jul 14, 2026

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill pentest-checklist --agent claude-code

Installs into .claude/skills of the current project.

Files

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

  1. Ask the user to state the exact target URL, IP, account, or resource.
  2. Ask the user to confirm written authorization and the permitted scope.
  3. Show the exact command(s) and explain their expected effect.
  4. Wait for explicit confirmation in the current conversation.

Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.

Pentest Checklist

Purpose

Sponsors

Details

Repository
github.com/sickn33/antigravity-awesome-skills
Category
Security
First seen
Jun 3, 2026

More from sickn33/antigravity-awesome-skills

All 708

Recommended

More Security
1aradotso avatarawesome-claude-code-security-compliance-suitearadotso/security-skillsawesome claude code security compliance suite633skills.sh installs
2mohitmishra786 avatarrust-securitymohitmishra786/low-level-dev-skillsRust security skill for supply chain safety and memory-safe development. Use when auditing dependencies with cargo-audit, enforcing policies with cargo-deny, re624skills.sh installs
3aradotso avatars800-vehicle-network-security-testingaradotso/security-skillss800 vehicle network security testing623skills.sh installs
4aradotso avataresaa-security-auditaradotso/security-skillsesaa security audit617skills.sh installs
5aj-geddes avatardata-encryptionaj-geddes/useful-ai-promptsImplement strong encryption using AES, RSA, TLS, and proper key management. Use when securing data at rest, in transit, or implementing end-to-end encryption.616skills.sh installs
6aradotso avatarmetatron-pentest-assistantaradotso/trending-skillsmetatron pentest assistant602skills.sh installs