Skip to content
SkillCheatSheet Sign in

pentest-tools

An AI agent skill from zhaoxuya520/reverse-skill, scored 61 out of 100 by code.

61/ 100C

Code score by group

  • Spec20/20
  • Description3/20
  • Procedure7/15
  • Done criteria7/15
  • Resources9/10
  • Scripts5/8
  • Safety7/7
  • Upkeep3/5

It loses the most points in Description (17), the group that checks whether the description says what the skill does and when to use it.

What the author says it does

主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。 通过 MCP server（pentestMCP / mcp-security-hub）将 20+ 安全工具暴露给 AI agent。 触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。

This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.

Repository
zhaoxuya520/reverse-skill
Folder
skills/pentest-tools
License
MIT
GitHub stars
44,546
SKILL.md lines
330
Other files
20

Add pentest-tools to your agent

npx skills add zhaoxuya520/reverse-skill --skill pentest-tools

The command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.

More skills from zhaoxuya520/reverse-skill

  1. diagram-generator

    generate, refine, validate, and render diagrams from natural language, notes, code snippets, schemas, tables, or existing diagram source. use for flowcharts, swimlanes, sequence d…

    Verified80B
  2. docs-generator

    Creates task-oriented technical documentation with progressive disclosure. Use when writing READMEs, API docs, architecture docs, or markdown documentation. Also use this skill at…

    75B
  3. case-review

    Reviews a reverse-skill case package for scope readiness, Evidence to Finding to Path traceability, work item coverage, timeline references, and optional artifact hash integrity b…

    74B
  4. ida-reverse

    IDA Pro 逆向分析辅助技能。当用户提到逆向、反编译、分析二进制/PE/ELF/APK/DLL/SO、破解、找密码、漏洞分析、病毒分析、firmware 固件分析，或需要分析 exe/dll/so/elf/macho/sys 等文件时，务必使用此技能。 Ensure to use this skill when the user wants to an…

    73B
  5. radare2

    Use this skill whenever the user wants to analyze binaries with radare2/r2 from the command line, including reverse engineering, disassembly, function analysis, strings/import ins…

    72B
  6. reverse-engineering

    Provides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, in…

    68C
  7. ctf-sandbox

    Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/A…

    67C
  8. dotnet-reverse

    .NET / C# 二进制逆向。当目标是 .NET assembly（PE 头含 CLR、.exe/.dll 托管程序）、C# 编译产物（含 NativeAOT）、红队 Sharp* 工具（Rubeus / SharpHound / SharpHound 等）、.NET 混淆程序（ConfuserEx / SmartAssembly / Babel / E…

    67C

All skills in zhaoxuya520/reverse-skill

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.