penetration-testing skills

Developers and security engineers who need to perform manual security audits on web applications, APIs, services, CLI tools, libraries, and daemons

The security-audit skill provides a structured methodology for conducting manual security audits of codebases. It guides an agent through six phases: reconnaissance, hunting, validation, reporting, structured output generation, and independent verification. The skill emphasizes finding exploitable vulnerabilities with concrete attack scenarios over theoretical concerns.