Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Pentest Checklist · zebbern | DecimalAI

securityby zebbern

Pentest Checklist

zebbern/pentest-checklist

Source zebbern/claude-code-guide ↗License MIT

This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for penetration testing", "define pentest scope", "follow security testing best practices", or needs a structured methodology for penetration testing engagements.

SkillScore87Maintained

Automatic

Security & AppSec pack

Last verified 8/10/2026

What it changes

Passed 20 of 23 test cases with the skill, and 18 of 23 without it.

Without skill78%

With skill87%

Checks it passed that the model alone missed

Includes environment cleanup in the post-pentest quick reference checklist.
Advises tracking error rate spikes to distinguish testing activity from actual attacks.

2 fixed18 passed either way3 still failing0 broke

Pass-rate lift: +9 pp
Tokens: +84%
Agent turns: 0%
Response time: -15%

Model gemini-3.6-flashMeasured 8/10/2026v120 of 23 cases passed with skill

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/zebbern-pentest-checklist/SKILL.md https://app.decimal.ai/s/zebbern-pentest-checklist/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add zebbern-pentest-checklist, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/zebbern-pentest-checklist/ and pins it in .decimal/skills.lock

decimalai skills add zebbern-pentest-checklist

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/zebbern-pentest-checklist/SKILL.md https://app.decimal.ai/s/zebbern-pentest-checklist/SKILL.md

Raw file: /s/zebbern-pentest-checklist/SKILL.md ↗ · machine-readable summary at /s/zebbern-pentest-checklist.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 2

Prompt

During active testing, our application performance monitoring tool flagged a sudden massive spike in 404 and 500 HTTP response errors. How should our operations team handle this anomaly?

What was checked, without and with the skill
Checked	Without skill	With skill
Advises tracking error rate spikes to distinguish testing activity from actual attacks.	Missed	Passed

case-17 · gemini-3.6-flash · 8/10/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md326 linessingle file

Pentest Checklist

Purpose

Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities.

Inputs/Prerequisites

Clear business objectives for testing
Target environment information
Budget and timeline constraints
Stakeholder contacts and authorization
Legal agreements and scope documents

Outputs/Deliverables

Defined pentest scope and objectives
Prepared testing environment
Security monitoring data
Vulnerability findings report
Remediation plan and verification

Core Workflow

Phase 1: Scope Definition

Define Objectives

Clarify testing purpose - Determine goals (find vulnerabilities, compliance, customer assurance)
Validate pentest necessity - Ensure penetration test is the right solution
Align outcomes with objectives - Define success criteria

Reference Questions:

Why are you doing this pentest?
What specific outcomes do you expect?
What will you do with the findings?

Know Your Test Types

| Type | Purpose | Scope |

Track record

Benchmark

20 / 23

test cases passed, vs 18 / 23 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

zebbern / claude-code-guide

skills/pentest-checklist/SKILL.md

View on GitHub ↗

License MITImported 8/3/2026Version v1

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

Pentest Checklist

Purpose

Inputs/Prerequisites

Outputs/Deliverables

Core Workflow

Phase 1: Scope Definition

Define Objectives

Know Your Test Types

Track record

Benchmark

Adoption

SkillSafety

Source

Other skills for the same job

Related skills