Repository
PentesterFlow/agent agent skills
- skills
- 5
- GitHub stars
- 1.4k
GitHub description: “Agentic offensive-security in your terminal”
- Stars
- 1,389 (248 forks)
- Licence
- Apache-2.0
- Last push
- Aug 2026
- Created
- May 2026
- Homepage
- pentesterflow.com
- ai
- ai-agents
- bugbounty
- penetration-testing
- security-audit
- security-automation
Install all skills
npx skills add PentesterFlow/agentAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in PentesterFlow/agent, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Fingerprints which language or framework produced a serialized blob, then helps build a working gadget chain to test for insecure deserialization. | PentesterFlow/ | 1.4k | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 2 | Maps the attack surface of a web domain you are authorized to test: confirms scope, lists subdomains from public sources, probes live hosts and fingerprints technology. | PentesterFlow/ | 1.4k | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 3 | 3.Ssti Server-Side Template Injection — fingerprint the engine first (Jinja2 / Twig / Velocity / Freemarker / ERB / Smarty / Mako / Handlebars / Pug), then escalate the engine-specific primitive to RCE or… | PentesterFlow/ | 1.4k | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 4 | 4.Takeover Subdomain takeover playbook — sweep subdomains for dangling CNAMEs / NS records pointing at unclaimed third-party resources (GitHub Pages, S3, Heroku, Azure, Netlify, Shopify, ...), confirm with the… | PentesterFlow/ | 1.4k | — | ~3.3k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 5 | 5.Webvuln Web vulnerability hunting playbook. An agent skill from PentesterFlow/agent. | PentesterFlow/ | 1.4k | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
Questions, answered from the data.
What is the best skill in PentesterFlow/agent?
Insecure Deserialization Playbook from PentesterFlow/agent ranks first of the 5 skills in PentesterFlow/agent listed here, with the highest score: its repository has 1.4k GitHub stars, its SKILL.md loads about 1.7k tokens and it passes the automated safety check with no findings. Next come External Recon Playbook and Ssti.
Are the skills in PentesterFlow/agent official?
None yet. All 5 skills in PentesterFlow/agent listed here come from community repositories; a skill counts as official when the product's own GitHub organization publishes it.
How do I install all skills from PentesterFlow/agent?
Run npx skills add PentesterFlow/agent in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.