0x-professor/agent-skills-hub/pentest-injection-engine

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Systematically test authorized targets for SQL, XSS, SSTI, XXE, command, and request-smuggling injection classes.

Install

npx vskill@latest install 0x-professor/agent-skills-hub/pentest-injection-engine

SKILL.md

Pentest Injection Engine

Stage

  • PTES: 5
  • MITRE: T1190, T1059

Objective

Validate injection exploitability and capture payload-level evidence.

Required Workflow

  1. Validate scope before any active action and reject out-of-scope targets.
  2. Run only authorized checks aligned to PTES, OWASP WSTG, NIST SP 800-115, and MITRE ATT&CK.
  3. Write findings in canonical finding_schema format with reproducible PoC notes.
  4. Honor dry-run mode and require explicit --i-have-authorization for live execution.
  5. Export deterministic artifacts for downstream skill consumption.

Execution

bash
python skills/pentest-injection-engine/scripts/injection_engine.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run

Outputs

  • injection-findings.json
  • xss-payloads-that-fired.json
  • injection-report.json

References

  • references/tools.md
  • skills/autonomous-pentester/shared/scope_schema.json
  • skills/autonomous-pentester/shared/finding_schema.json

Legal and Ethical Notice

text
WARNING AUTHORIZED USE ONLY
This skill executes real security testing tools against live targets.
Use only with written authorization.

Security

  • Security scanPassed, 90 of 100Pattern checks on the skill's files.
  • Model reviewPassed

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

Repository stars
11
Repository forks
2
7-day trend score
12

Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/0x-professor/agent-skills-hub/pentest-injection-engine/badge)](https://verified-skill.com/skills/0x-professor/agent-skills-hub/pentest-injection-engine)

Something wrong with this skill or its page? Tell us.