Guided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research.
$ npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install lingbol088-spec/ReiPenFlow penetration-flow --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/lingbol088-spec/ReiPenFlow.git skills-src && mkdir -p .claude/skills && cp -r skills-src/penetration-flow .claude/skills/penetration-flow && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "penetration-flow" agent skill from https://github.com/lingbol088-spec/ReiPenFlow/tree/main/penetration-flow into .claude/skills/penetration-flow/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "penetration-flow", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/lingbol088-spec/ReiPenFlow/tree/main/penetration-flowType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install lingbol088-spec/ReiPenFlow penetration-flow --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/lingbol088-spec/ReiPenFlow.git skills-src && mkdir -p .agents/skills && cp -r skills-src/penetration-flow .agents/skills/penetration-flow && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "penetration-flow" agent skill from https://github.com/lingbol088-spec/ReiPenFlow/tree/main/penetration-flow into .agents/skills/penetration-flow/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "penetration-flow", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install lingbol088-spec/ReiPenFlow penetration-flow --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/lingbol088-spec/ReiPenFlow.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/penetration-flow .cursor/skills/penetration-flow && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "penetration-flow" agent skill from https://github.com/lingbol088-spec/ReiPenFlow/tree/main/penetration-flow into .cursor/skills/penetration-flow/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "penetration-flow", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/lingbol088-spec/ReiPenFlow.git --path penetration-flow--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install lingbol088-spec/ReiPenFlow penetration-flow --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/lingbol088-spec/ReiPenFlow.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/penetration-flow .gemini/skills/penetration-flow && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "penetration-flow" agent skill from https://github.com/lingbol088-spec/ReiPenFlow/tree/main/penetration-flow into .gemini/skills/penetration-flow/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "penetration-flow", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install lingbol088-spec/ReiPenFlow penetration-flowInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/lingbol088-spec/ReiPenFlow.git skills-src && mkdir -p .github/skills && cp -r skills-src/penetration-flow .github/skills/penetration-flow && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "penetration-flow" agent skill from https://github.com/lingbol088-spec/ReiPenFlow/tree/main/penetration-flow into .github/skills/penetration-flow/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "penetration-flow", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install lingbol088-spec/ReiPenFlow penetration-flow --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/lingbol088-spec/ReiPenFlow.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/penetration-flow .opencode/skills/penetration-flow && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "penetration-flow" agent skill from https://github.com/lingbol088-spec/ReiPenFlow/tree/main/penetration-flow into .opencode/skills/penetration-flow/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "penetration-flow", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
penetration-flowGuided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research.
Penetration Flow is an agent skill from lingbol088-spec/ReiPenFlow. Guided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research. Use when Codex is asked to run or plan a security assessment, triage a target or artifact, maintain pentest state, produce interim/final reports, choose next steps, perform deep authorized testing, validate vulnerabilities with controlled proof-of-concept evidence, or reverse engineer binaries, mobile apps, firmware, protocols, captures…
Its SKILL.md is about 1.8k tokens, which your agent loads only when the skill is triggered. The skill folder holds 19 other files, including scripts and reference files (for example `agents/openai.yaml`, `references/ctf-workflow.md` and `references/evidence-schema.md`).
It sits in Security, covering Penetration testing, Security review and Capture the flag. The repository describes itself as: Codex skill for local sandbox, CTF, authorized pentest and reverse-engineering workflows. The licence is MIT.
6 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit 75f2aee. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Ships 6 files in scripts/ (Python), which the agent can run.
Shell commands in SKILL.md call:
pythonFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Penetration Flow loads about 1.8k tokens when it runs, and up to ~9.4k if it reads all its reference files. Until then it costs about 194 tokens; SKILL.md has 623 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
GitHub didn't answer just now, so the file isn't shown here. It has 623 words (~1,753 tokens).
SKILL.md and 16 other files (scripts, references) in penetration-flow of lingbol088-spec/ReiPenFlow.
Open the folder on GitHubat commit 75f2aee
Penetration Flow next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Penetration Flow this skilllingbol088-spec/ReiPenFlow | 222 | — | ~1.8k | Automated safety check: Pass | MIT | |
| Performing iOS App Security Assessmentmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3k | Automated safety check: Pass | Apache-2.0 | |
| Strix Code Vulnerability Scanusestrix/strix | 68k | — | ~1.1k | Automated safety check: Pass | Apache-2.0 | |
| Code Audit3stoneBrother/code-audit | 892 | 1 repos | ~2.7k | Automated safety check: Pass | None | |
| Reverse Flowlingbol088-spec/reverse-flow-skill | 940 | — | ~2.4k | Automated safety check: Pass | MIT | |
| Wooyun Legacytanweai/wooyun-legacy | 1.8k | — | ~1.9k | Automated safety check: Pass | Custom licence |
mukul975/Anthropic-Cybersecurity-Skills
Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain…
usestrix/strix
Runs a Strix white-box security review that reads the source, then exploits what it finds in a sandbox so each reported issue has a proof-of-concept.
3stoneBrother/code-audit
Professional code security audit skill covering 55+ vulnerability types.
lingbol088-spec/reverse-flow-skill
Guided reverse engineering workflow for binaries, firmware, mobile apps, scripts, document samples, protocol captures, and unknown artifacts.
tanweai/wooyun-legacy
WooYun business logic vulnerability methodology — 22,132 real cases across 6 domains (authentication bypass, authorization bypass, payment tampering, information disclosure, logic flaws…
awarexone/Agentic-Bug-Hunter
Recovers a client-side request signature or anti-bot token just far enough to replay blocked requests in bug bounty testing, starting from a captured packet.
Categories
Guided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research. Penetration Flow is an agent skill from lingbol088-spec/ReiPenFlow. Guided workflow for authorized penetration testing, vulnerability validation, security reporting, CTF/local sandbox reverse engineering, and user-directed vulnerability research.
Penetration Flow fits situations like: Codex is asked to run; plan a security assessment; triage a target; maintain pentest state.
Run `npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a claude-code`. Or copy the skill folder (penetration-flow in lingbol088-spec/ReiPenFlow) into .claude/skills/penetration-flow in your project. Claude Code loads it when a task matches its description.
Run `npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a codex`. Or copy the skill folder (penetration-flow in lingbol088-spec/ReiPenFlow) into .agents/skills/penetration-flow in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add lingbol088-spec/ReiPenFlow --skill penetration-flow -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/penetration-flow, .gemini/skills/penetration-flow, .github/skills/penetration-flow and .opencode/skills/penetration-flow in your project.
Going by SKILL.md and its folder, Penetration Flow needs Python for the scripts in its folder and the command-line tools its instructions call (python). Our summary lists: Python 3.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
Penetration Flow is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.8k tokens (SKILL.md is roughly 7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 7.6k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Penetration Flow: Performing iOS App Security Assessment (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Strix Code Vulnerability Scan (usestrix/strix, 68k stars), Code Audit (3stoneBrother/code-audit, 892 stars) and Reverse Flow (lingbol088-spec/reverse-flow-skill, 940 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
lingbol088-spec (a GitHub user) maintains it in lingbol088-spec/ReiPenFlow, which has 222 GitHub stars. The repository was last updated on July 24, 2026.
Source: lingbol088-spec/ReiPenFlow on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
