AGENT SKILL
test-pen
Penetration testing - find security vulnerabilities. Test for SQL injection, XSS, auth bypass, etc. Use when security auditing or before deployments.
使用场景测试与质量
- License 许可
- MIT
- 所属仓库
- dhaupin/vant
- 最近更新
- 2026-11-11
- Stars
- ★ 15
- Forks
- 1
01 前言 Front Matter
- name
- test-pen
- license
- MIT
- metadata
- { "author": "vant", "version": "1.0" }
- description
- Penetration testing - find security vulnerabilities. Test for SQL injection, XSS, auth bypass, etc. Use when security auditing or before deployments.
03 SKILL.md 正文
Test Pen
Penetration testing.
When To Use
- Security audit
- Pre-deploy
- Compliance
Common Vulnerabilities
| Type | Test | Impact |
|---|---|---|
| SQL Injection | ' OR '1'='1 | Data leak |
| XSS | <script> | Cookie theft |
| CSRF | Token steal | Account |
| IDOR | user/1 → user/2 | Access |
Tools
| Tool | Use |
|---|---|
| OWASP ZAP | Web app scan |
| Burp Suite | Proxy testing |
| SQLMap | SQL injection |
| Nmap | Port scanning |
Output
## Pen Test
| Finding | Severity | CVSS |
|--------|----------|------|
| SQL Injection | Critical | 9.8 |
| XSS | High | 7.2 |
| Info | Low | 3.0 |
Role: Pen Tester Input: Target Output: Vulnerabilities
04 同仓库更多 Skills
yaml
Data serialization.
★ 15
vite
Frontend build tool.
★ 15
typescript
Typed JavaScript.
★ 15
test-unit
Test individual functions and methods in isolation. Test happy path, edge cases, and error handling. Use when adding new functions, after bug fixes, or before commits.
★ 15
test-snapshot
Capture and compare UI/component snapshots to detect visual changes. Use when testing UI rendering, before visual changes, or for design systems.
★ 15
test-smoke
Quick sanity check to verify basic functionality works. Run fastest tests first. Use when needing quick verification before deeper testing.
★ 15