skills.rest
real-case
real-caseCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

sec-pentest

Generates an application-specific penetration testing checklist mapped to OWASP Testing Guide categories.

Updated Apr 16, 2026
Search Tags:#checklist#security#vulnerability#owasp#penetration testing#attack surface#pentest
One-click install
npx skills add https://github.com/real-case/marvin-toolkit --skill sec-pentest-real-case
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sec-pentest
Source: https://github.com/real-case/marvin-toolkit/tree/main/plugins/marvin/skills/sec-pentest
Command: npx skills add https://github.com/real-case/marvin-toolkit --skill sec-pentest-real-case

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Generic penetration testing checklists miss real bugs because they ignore the actual application. This Skill reads your codebase, profiles the technology stack and attack surface, and produces a tailored, prioritized pentest plan instead of a one-size-fits-all template. ## Core Features & Use Cases - Application Profiling: Detects the stack, authentication mechanism, API style, data sensitivity, and trust model directly from source code. - Attack Surface Enumeration: Maps API endpoints, forms, WebSockets, file uploads, and other entry points into a structured matrix. - Prioritized Test Cases: Generates OWASP Testing Guide test cases (authentication, authorization, injection, session, configuration, business logic) with tool commands for Burp Suite, sqlmap, ZAP, nmap, and more. - Use Case: Before engaging an external security assessor, run this Skill to produce a scoped pentest checklist at .marvin/security/pentest-checklist.md, complete with a machine-readable audit-report block for downstream reporting. ## Quick Start Ask the assistant to plan a pentest for this application and generate a prioritized security testing checklist.

Frequently Asked Questions about sec-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a penetration testing checklist for my application?▼

Run the pentest planning workflow, which reads your codebase to detect the stack, authentication mechanism, and API endpoints. It then produces a prioritized checklist of test cases organized by OWASP Testing Guide categories, written to .marvin/security/pentest-checklist.md.

What tools are recommended for web application penetration testing?▼

The checklist maps test cases to tools with copy-paste commands: Burp Suite and OWASP ZAP for proxying and scanning, sqlmap and commix for injection, jwt_tool and Hydra for authentication, and nmap, nikto, and nuclei for infrastructure testing.

Does this skill actually run penetration tests against my app?▼

No. It produces a plan, not results. The output is a checklist for human testers or automated tool configuration; it does not execute pentest tools or send traffic to any target.

How are pentest test cases prioritized in the checklist?▼

Test cases are ordered by risk into four tiers: critical path items like authentication bypass and IDOR first, then high-value tests like SSRF and XSS, followed by configuration hardening, and finally edge cases like race conditions. Priority 1 is kept under 20 items.

Can the checklist be consumed by reporting dashboards or audit tools?▼

Yes. The skill appends a machine-readable audit-report JSON block to the checklist file with kind set to pentest, one info-severity finding per planned test, and summary counts, so audit tools and dashboards can ingest it as typed data.

Related Skills

Explore More Software Engineering Skills→
jd-opensourcejd-opensource
299

pentest-recon-attack-surface

Correlate external scans, browser exploration, and source code to map application attack surfaces.

Official
Advanced
4lerman4lerman

security-pen-testing

Audit web applications, APIs, and infrastructure for security vulnerabilities.

Community
Advanced
noname300989noname300989

code-analysis

Analyze source code and running applications for security vulnerabilities.

Community
Advanced
bpnrockstarbpnrockstar

dast-scanner

Automate DAST scanning with OWASP ZAP and nuclei, then import findings into a bug hunter database.

Community
Advanced