Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →transilienceai/essential-tools
Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.
Passed 16 of 21 test cases with the skill, and 10 of 21 without it.
and 4 more in the full report
7 fixed10 passed either way5 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
Which reference file provides the quickstart guide for static analysis of executable files and reverse engineering?
| Checked | Without skill | With skill |
|---|---|---|
| The response references reference/binary-analysis-quickstart.md for static analysis guidance. | Missed | Passed |
The instructions your model reads when the skill loads.
Core tools, methodology, and reporting standards for penetration testing.
| Component | Purpose |
|---|---|
| Burp Suite | Proxy, scanner, intruder, repeater, sequencer |
| Playwright | Browser automation, evidence capture, SPA testing |
| Binary Analysis | Static analysis, reverse engineering, string extraction |
| Nuclei | Templated exposure & misconfiguration scanning |
| sslscan | TLS posture (protocols, ciphers, cert) |
| Methodology | PTES, OWASP WSTG, attack prioritization |
| Reporting | Professional report templates, PDF generation |
reference/essential-skills*.md - Burp Suite techniques and web security testing methodologyreference/playwright-automation.md - Playwright MCP usage for pentestingreference/binary-analysis-quickstart.md - Static analysis for executable files and reverse engineeringreference/web-application-attacks.md - Web application attack methodologyformats/transilience-report-style/pentest-report.md - Finding quality standards, compliance mapping, and pre-delivery checklistRun an availability check before declaring recon complete:
command -v subfinder nuclei sslscan httpx; curl -s "https://crt.sh/?q=%25.${DOMAIN}&output=json" | head -c1
If a tool-class is unavailable, record it as an explicit limitation — NEVER declare recon COMPLETE having skipped a whole class. Hand-rolled urllib is not a substitute (see skills/coordination/reference/principles.md 'Real tools before hand-rolled HTTP').
test cases passed, vs 10 / 21 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.