Runs an authorization-gated penetration-test engagement against a target (repo, web app, API, network, cloud, or mobile client) following PTES, OWASP WSTG/MASTG/API Top 10, and NIST SP 800-115 — from scoping and rules of engagement through recon, attack-surface mapping, testing, exploitation-to-proof, and a findings report with CWE/CVSS and retest. Passive review of your own code needs no gate; any active probe, scan, or exploitation is hard-gated behind written authorization and scope. Use when the user says 'pentest', 'penetration test', 'pen test', 'red team', 'attack surface assessment', 'offensive security', 'OWASP WSTG', 'PTES engagement', 'проведи пентест', 'тест на проникновение'. Do not use for white-box static review of files or a diff — use awesome-security-audit; for what a public client discloses about its backend — use awesome-leak-audit; for dependency/supply-chain CVEs — use awesome-dependency-audit.
Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI
Supported by the Atlas install prompt. Skill-specific requirements vary.
Skill stats
Skills1CategorySecurityStars0
About this skill
Runs an authorization-gated penetration-test engagement against a target (repo, web app, API, network, cloud, or mobile client) following PTES, OWASP WSTG/MASTG/API Top 10, and NIST SP 800-115 — from scoping and rules of engagement through recon, attack-surface mapping, testing, exploitation-to-proof, and a findings report with CWE/CVSS and retest. Passive review of your own code needs no gate; any active probe, scan, or exploitation is hard-gated behind written authorization and scope. Use when the user says 'pentest', 'penetration test', 'pen test', 'red team', 'attack surface assessment', 'offensive security', 'OWASP WSTG', 'PTES engagement', 'проведи пентест', 'тест на проникновение'. Do not use for white-box static review of files or a diff — use awesome-security-audit; for what a public client discloses about its backend — use awesome-leak-audit; for dependency/supply-chain CVEs — use awesome-dependency-audit.
Quick start
Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Runs an authorization-gated penetration-test engagement against a target (repo, web app, API, network, cloud, or mobile client) following PTES, OWASP WSTG/MASTG/API Top 10, and NIST SP 800-115 — from scoping and rules of engagement through recon, attack-surface mapping, testing, exploitation-to-proof, and a findings report with CWE/CVSS and retest. Passive review of your own code needs no gate; any active probe, scan, or exploitation is hard-gated behind written authorization and scope. Use when the user says 'pentest', 'penetration test', 'pen test', 'red team', 'attack surface assessment', 'offensive security', 'OWASP WSTG', 'PTES engagement', 'проведи пентест', 'тест на проникновение'. Do not use for white-box static review of files or a diff — use awesome-security-audit; for what a public client discloses about its backend — use awesome-leak-audit; for dependency/supply-chain CVEs — use awesome-dependency-audit.
About this listing
Category
Security
Reported license
MIT
Listing language (estimated)
English
Review status
Not individually reviewed
Agent compatibility
Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLI