Skip to content
SkillCheatSheet Sign in

security-pen-testing

An AI agent skill from alirezarezvani/claude-skills, scored 64 out of 100 by code.

64/ 100C

Code score by group

  • Spec20/20
  • Description8/20
  • Procedure7/15
  • Done criteria4/15
  • Resources9/10
  • Scripts6/8
  • Safety7/7
  • Upkeep3/5

It loses the most points in Description (12), the group that checks whether the description says what the skill does and when to use it.

What the author says it does

Authorized penetration testing of an app or API: vulnerability scans, OWASP Top 10 checks, dependency audits and a pentest report. Use whenever the user asks if their app is secure or hackable, wants a security scan or a pentest report.

This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.

Repository
alirezarezvani/claude-skills
Folder
engineering-team/skills/security-pen-testing
License
MIT
GitHub stars
29,683
SKILL.md lines
307
Other files
6

Add security-pen-testing to your agent

npx skills add alirezarezvani/claude-skills --skill security-pen-testing

The command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.

More skills from alirezarezvani/claude-skills

  1. mcp-oauth-triage

    Use when an MCP connector that used to authenticate now fails (tool calls 401 after a good token exchange, breaks after refresh, returns another account's data), before changing c…

    Verified92A
  2. changelog-generator

    Write release notes and CHANGELOG.md from commits and pick the next semver version. Use whenever the user is cutting a release, asks what changed since the last one or what versio…

    Verified90A
  3. schema-markup

    Use for any JSON-LD, schema.org, rich-result or structured-data request, before writing markup. Validates the markup with schema_validator.py against Google's required properties,…

    Verified90A
  4. content-production

    Write a blog post, article or guide end to end: research, outline, draft, SEO pass and quality gates. Use whenever the user asks to write a blog post, draft an article on a topic,…

    Verified89A
  5. ad-creative

    Use for any ad copy request (RSA headlines, Meta, LinkedIn or TikTok ads, bulk variations), before writing. Checks every line against platform character limits and policy with ad_…

    Verified88A
  6. focused-fix

    Use when a whole feature or module is broken and needs fixing end to end ('make X work', 'the Y module is broken'). Maps every file and dependency of the area before changing anyt…

    Verified87A
  7. git-worktree-manager

    Use when running several branches or agents in parallel on one repo. Creates worktrees with isolated ports and env via worktree_manager.py and removes stale ones with worktree_cle…

    Verified87A
  8. spec-driven-workflow

    Use when a feature should be specified before coding (acceptance criteria, spec-first, tests from specs). Writes the spec with spec_generator.py, checks it with spec_validator.py…

    Verified86A

All skills in alirezarezvani/claude-skills

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.