Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities.
SkillScore82Maintained
Automatic
◆Security & AppSec pack
Last verified 8/28/2026
What it changes
Passed 18 of 22 test cases with the skill, and 15 of 22 without it.
Without skill68%
With skill82%
Checks it passed that the model alone missed
Requires verifying backup integrity prior to testing or remediation
Identifies asset value and system complexity as key budgeting factors
Advises briefing operations teams in advance to distinguish testing traffic from actual attacks
3 fixed15 passed either way4 still failing0 broke
Pass-rate lift
+14 pp
Tokens
+79%
Agent turns
0%
Response time
-27%
Model gemini-3.6-flashMeasured 8/28/2026v118 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 3
Prompt
Before starting remediation activities or conducting invasive testing procedures that might disrupt host configurations, what safeguard step must be performed regarding system data?
What was checked, without and with the skill
Checked
Without skill
With skill
Requires verifying backup integrity prior to testing or remediation
Missed
Passed
case-17 · gemini-3.6-flash · 8/28/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md331 linessingle file
AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
Pentest Checklist
Purpose
Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities.