What problem does it solve? Penetration testing involves many disconnected steps—reconnaissance, crawling, vulnerability probing, evidence collection, and reporting—and it is easy to skip phases or produce plans that never get executed. This Skill maps security testing methodology to concrete callable tools, defining a complete decision flow from target intake to final report. ## Core Features & Use Cases - Phased Task Orchestration: Guides the full lifecycle across reconnaissance (DNS, subdomain, WHOIS, port scan, crawler, TLS, fingerprinting), scope analysis, task planning, test execution, and report generation. - Tool-to-Task Mapping: Maps each testing step to specific tools such as scan_port, simple_crawler, do_http_request, brute, poc_template_searcher, and tls_inspect, with per-vulnerability execution flows for SQL injection, XSS, command injection, SSTI, IDOR, SSRF, and weak credentials. - Evidence-First Reporting: Enforces immediate vulnerability reporting via the cybersecurity-risk tool and organizes all artifacts into a structured recon/analysis/plan/results/report directory layout. - Use Case: Given a target like example.com, the Skill drives DNS enumeration, subdomain scanning, port scanning, web crawling, fingerprinting, prioritized test task generation, actual payload verification, and a severity-ranked pentest report. ## Quick Start Perform a security assessment of example.com, starting with reconnaissance and ending with a vulnerability report.
