Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Strategic-Automation/violin --skill pentestgit clone --depth 1 https://github.com/Strategic-Automation/violinWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/strategic-automation/violin/pentest)<a href="https://agentmods.dev/skills/strategic-automation/violin/pentest"><img src="https://agentmods.dev/badge/skills/strategic-automation/violin/pentest/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/strategic-automation/violin/pentest"><img src="https://agentmods.dev/badge/skills/strategic-automation/violin/pentest.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.02229 |
| Opus 5.5 | $0.00007 | $0.00892 |
| Sonnet 5.5 | $0.00003 | $0.00446 |
| Haiku 4.5 | $0.00002 | $0.00223 |
Grade A, and why
pentest scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
body to its own file under `evidence/` (e.g. `curl -i -o How it starts
The opening of the file, as written. The whole thing — 176 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Pentest Orchestrator
The authoritative engagement lifecycle and skill router. It does not contain vulnerability payloads or tool matrices: load the matched phase playbook and specialist skill on demand.
Non-Negotiable Contract
- Test only an approved scope. Target-touching work uses
violin_execorviolin_exec_burst; host-local preparation may useterminal. - Maintain exactly one active
[~]PTT task. Keep structured hypotheses, evidence, coverage, and phase state under$ENG_DIR. - Store raw proof only under
$ENG_DIR/evidence/<phase>/; never store secrets or evidence inskills/or$ENG_DIR/state/. - Do not close an engagement without
reporting/report.mdandretrospective/retrospective.md. - One finding per vulnerability — never bundle. Each distinct
vulnerability (a separate flaw, endpoint, or attack class) gets its own
violin_submit_findingcall. If one probe exposed two flaws (e.g. a JWT algorithm bypass AND a separate missing-access-control on an admin route), submit two findings, each naming its own decisive receipts and saved bodies. Bundling unrelated flaws under one finding blurs severity, remediation, and traceability — each report entry must stand alone and be independently attributable to one flaw. - Do not stop at the first confirmed finding. Sweep every in-scope obligation until it is tested, not-applicable, or blocked with evidence. A partial pass that leaves obligations untested is an incomplete assessment.
- Every validated hypothesis becomes a finding. Before REPORTING, walk
hypotheses.mdand confirm eachValidatedhypothesis has a corresponding submitted finding. A validated flaw with no finding is a missed submission.
Load on Demand
| Need | Read |
|---|---|
| Scope, stop conditions, safety | references/shared-safety.md and .hermes.md |
| Evidence, confidence, CVSS | references/standards.md and references/evidence-and-verification-discipline.md |
| Exhaustive coverage matrix | references/exhaustive-coverage.md |
| Pre-REPORTING common-class sweep | references/coverage-closeout.md |
| Methodology gates (close-gate checklist) | state/methodology-gates.yaml (dispositioned in VULN_RESEARCH) |
| Repeated failure or stalled research | references/anti-stuck.md |
| Platform, delegation, tool fallback | references/platform-delegation.md |
| CVE and public vulnerability research | references/cve-apis.md |
What ships with it
42 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- playbooks/anti-automation.md 7.6 KB
- playbooks/exploitation.md 9.5 KB
- playbooks/post-exploitation.md 4.4 KB
- playbooks/recon.md 16 KB
- playbooks/reporting.md 14 KB
- playbooks/scoping.md 12 KB
- playbooks/supply-chain.md 7.5 KB
- playbooks/tools.md 9.3 KB
- playbooks/vuln-research.md 14 KB
- references/anti-stuck.md 2.1 KB
- references/api-testing.md 3.5 KB
- references/coverage-closeout.md 3.9 KB
- references/cve-apis.md 6.2 KB
- references/evidence-and-verification-discipline.md 10 KB
- references/exhaustive-coverage.md 7.6 KB
- references/exploitation-patterns.md 2.7 KB
- references/flags-mode.md 2.2 KB
- references/kali-parrot-paths.md 4.2 KB
- references/methodology.md 11 KB
- references/platform-delegation.md 4.6 KB
- references/pty-safe-delivery.md 1.3 KB
- references/real-world-coverage-matrix-template.yaml 3.8 KB
- references/recon-methodology.md 2.1 KB
- references/retrospective.md 3.5 KB
- references/shared-safety.md 2.6 KB
- references/standards.md 14 KB
- references/tool-catalog.md 12 KB
- references/tool-discovery.md 8.2 KB
- templates/checkpoint.json 371 B
- templates/coverage-matrix.yaml 889 B
- templates/cvss4-crosswalk.md 2.4 KB
- templates/detection-engineering.md 3.2 KB
- templates/flag-capture-register.md 2.5 KB
- templates/hypothesis-board.md 3.8 KB
- templates/methodology-gates.md 3.5 KB
- templates/methodology-gates.yaml 1.8 KB
- templates/ptt.md 4.5 KB
- templates/report-template.md 5.6 KB
- templates/scope-template.yaml 4.6 KB
- templates/shell_ctrl.py 2.4 KB runs code
- templates/transparency-boilerplate.md 868 B
- templates/verification-receipt.yaml 775 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +15 lines 8d082e479440
- 28d ago Changed · +15 lines a44fea270645
- 1mo ago First seen · 146 lines · 17 tokens per session scan A eafcb0b58392
pentest is a skill published in the GitHub repository Strategic-Automation/violin (151 stars, last pushed 3d ago), licensed MIT. It adds 17 tokens to every session and 2,229 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
performing-jwt-none-algorithm-attack
Execute and test the JWT none algorithm attack to bypass signature verification by manipulating the alg header field in JSON Web Tokens.
bypassing-authentication-with-forced-browsing
Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized security assessments.
kali-pentest
Execute authorized penetration testing via Kali Linux CLI tools over SSH or Docker. Covers: information gathering, vulnerability analysis, sniffing & spoofing, web/API testing, exploitation, password attacks, wireless, cloud-native security, RFID/NFC, VoIP/ICS, reverse engineering, forensics, post-exploitation/C2, and…
kali-pentest-zh
A Chinese-language guide for carrying out authorized penetration tests with Kali Linux command-line tools through a local system, SSH, or Docker.
api-security-testing
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object…
owasp-top-10-testing
Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design…