111 tagged ai pentesting, measured the same way as everything else here.
Browse within: ai-hacking 95ai-security 74cybersecurity 74devsecops 58ai-penetration-testing 46aws 37cis 37cis-iam 22iam 22artificial-intelligence 9penetration-testing 9cis-storage 8storage 8pentesting 7
Skill Claude CodeCodex
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object…
Skill Claude CodeCodex
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use…
Skill Claude CodeCodex
Run a managed pentest of a web app or API through the app.strix.ai REST API — no local Docker, LLM key, or install needed. Create an API token, register domain/repository assets, launch and poll scans, triage vulnerabilities, export SARIF, download PDF/DOCX pentest reports for SOC 2 and other compliance evidence…
Skill Claude CodeCodex
Ensure IAM policies that allow full ":" administrative privileges are not attached.
Skill Claude CodeCodex
Ensure that RDS instances are not publicly accessible.
Skill Claude CodeCodex
Authentication testing skill - automates signup, login, 2FA bypass, CAPTCHA solving, and bot detection evasion using Playwright MCP. Tests authentication security controls. Includes behavioral biometrics simulation, OTP handling, and automated account creation for security assessments.
Skill Claude CodeCodex
MKS (Metasploit-Kali Server) tool preference guide. Mount in Phase 0/1 alongside the primary skill. Provides URL resolution, REST endpoint patterns, response parsing, error handling, and fallback rules for all MKS-backed Kali tools.
Skill Claude CodeCodex
Penetration testing orchestrator that coordinates specialized attack agents. Provides attack indexes, methodology frameworks, and documentation. Execution delegated to specialized agents (SQL Injection, XSS, SSRF, etc.). Use for engagement planning and attack coordination.
Skill Claude CodeCodex
Automate browser interactions, test web pages and work with Playwright tests.
Skill Claude CodeCodex
Nuclei CLI parameter reference and usage patterns - YAML-template vulnerability scanning, target input modes, template filters, output formats, rate limits, ProjectDiscovery dashboard upload, and common scan commands.
Skill Claude CodeCodex
Final engagement report generation — executive summary, technical report, findings aggregation, attack path narrative, detection gap matrix, remediation roadmap.