Menu
Install pentest-cli and verify the security testing environment. Run this first.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Complete reference for pentest-cli. Load this skill when you need to call the CLI with correct syntax, flags, and output shapes.
Business logic and authorization testing. IDOR, privilege escalation, workflow bypass, payment manipulation.
Show all available pentest-cli commands and how to use them.
Advanced attack testing. Request smuggling, race conditions, cache poisoning, subdomain takeover.
Authentication and session security testing. JWT, OAuth, sessions, brute force.
Cloud and infrastructure testing. Storage misconfig, WAF detection, email security.
| name | setup |
| description | Install pentest-cli and verify the security testing environment. Run this first. |
| user-invocable | true |
| allowed-tools | ["Bash","Read"] |
Check if pentest-cli is installed and working. If not, install it automatically.
Check if pentest is installed:
pentest --version 2>/dev/null
If NOT installed, install it:
curl -fsSL https://raw.githubusercontent.com/sabania/pentest-cli/main/install.sh | bash
export PATH="$HOME/.local/bin:$PATH"
Verify installation:
pentest --version
Check optional tools:
for tool in nmap sqlmap hydra nikto nuclei whatweb dnsrecon gobuster; do
path=$(which $tool 2>/dev/null)
if [ -n "$path" ]; then
echo " ✓ $tool ($path)"
else
echo " ✗ $tool (not installed - optional)"
fi
done
Report to user:
pentest --help/pentest-full <url> to start a full security audit"pip install -e . from the repo