Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/fb0sh/pentester/pentester-toolkitnpx skills add fb0sh/pentester --skill pentester-toolkitgit clone --depth 1 https://github.com/fb0sh/pentesterWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00037 | $0.01387 |
| Opus 5 | $0.00018 | $0.00694 |
| Sonnet 5 | $0.00007 | $0.00277 |
| Haiku 4.5 | $0.00004 | $0.00139 |
Grade A, and why
pentester-toolkit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 93 lines — stays where its author put it; the contents beside it link to each section on GitHub.
pentester-toolkit
Agent capability resolve: .agents/tools/resolve.js · .agents/tools/README.md
Curated manifests / per-tool details: .agents/tools/TOOLS.md
Manifest files: .agents/tools/<tool>.dotslash（11 个：subfinder naabu httpx EHole dismap dddd nuclei afrog xray DefaultHound fscan）
Env seam: .agents/schema/env.md · env-render.js（path_root / exec_prefix）
这是一个薄适配器：先让 Agent 用 resolver 根据当前 Phase 和已知 Signal 判断是否需要工具，
再把选中的 DotSlash/Kali package 在当前 scan_env 里按需落地；不重实现工具、不硬编码 Phase 私有执行环境。
node .agents/tools/resolve.js --id ${ID} --phase 3 --scan-env ${scan_env} --signals "<threat-model signals>"
node .agents/tools/ensure.js --scan-env ${scan_env} --id ${ID} --dry-run <tool>
# 只有已选择该工具后：把 --dry-run 改为 --install
resolve.js 无副作用；未命中时继续人工方法，不能为了调用工具而扩大测试范围。
Kali catalog 文档只在 resolver 命中后读取，不在 Phase 开始时批量加载。
0. 首次 setup —— 先生成 hash（一次，需网络）
标 needs-gen 的清单（dddd · EHole · dismap · DefaultHound）digest 是占位符，生成前不执行：
node .agents/tools/gen-dotslash.js all # 回填 size + sha256（下载真实产物）
node .agents/tools/gen-dotslash.js all --check # 复核，不改写
pre-verified 的（subfinder naabu httpx nuclei afrog xray fscan）已带官方 sha256，开箱即用。
1. 按 scan_env 落地
推荐按需：node .agents/tools/ensure.js --scan-env <host-kali|docker> --id ${ID} --install <tool>。
DotSlash 维护/批量供应仍可使用：bash .agents/tools/provision.sh --scan-env <host-kali|docker> --id ${ID} [all|<tool>]。
以下是它做的等价动作（也可手工执行）：
host-kali —— 主机即 Kali，工具跑在主机
# a) 确保 dotslash 在 PATH（缺则装，见 provision.sh：从 facebook/dotslash release 取二进制）
command -v dotslash || echo "install dotslash first (provision.sh --scan-env host-kali 会装)"
# b) 直接跑清单（DotSlash 按平台拉取/校验/缓存/执行）
dotslash .agents/tools/httpx.dotslash -version
# 或让清单自执行（已 chmod +x + shebang）：
.agents/tools/nuclei.dotslash -version
# c) 想像普通命令一样调用：把清单软链到 PATH 上的 bin（去掉 .dotslash 后缀）
ln -sf "$(pwd)/.agents/tools/nuclei.dotslash" ~/.local/bin/nuclei # 之后直接 `nuclei ...`
docker —— 工具在 kali-target-${ID} 容器内跑
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 93 lines · 37 tokens per session scan A 589225c57247
pentester-toolkit is a skill published in the GitHub repository fb0sh/pentester (23 stars, last pushed 1mo ago), licensed MIT. It adds 37 tokens to every session and 1,387 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
transilience-report-style
Threat Intelligence Report Design System — ReportLab-based PDF generation for A4 reports with Transilience branding, typography, and layout standards.
firewall-review
Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (17 vendor-agnostic plus 5 FortiGate-specific), a 15-check semantic catalogue, CIS Fortinet FortiGate Benchmark guidance, a custom customer-policy benchmark, and consolidated network-team Excel profiles including grouped…
pentest-engagement
Run a professional penetration engagement OR a network vulnerability scan from a scope. WEB mode (apex domains / app URLs) — mandatory surface expansion, systematic OWASP attack-class coverage, reversible active exploitation, authoritative validation, Transilience PDF. NETWORK mode (a list of IPs/CIDRs, e.g. 1500…
coordination
Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.
hackerone
HackerOne bug bounty automation - parses scope CSVs, deploys parallel pentesting agents per asset, validates PoCs, and generates platform-ready submission reports.
pci-secure-software
Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET /…