/security--pentest-prep

/security--pentest-prep is a Claude Code skill in the Code section. Prepares you for a penetration test: sweeps for easy fixes, documents the scope and delivers a pentest-prep.md with a checklist and known risks.

Author's description

Defensive pre-pentest hardening: scope doc, quick fixes, evidence collection

How to ask for it

/security--pentest-prep prep our app before the external security audit
/security--pentest-prep create the scope document for the pentest
/security--pentest-prep what quick fixes should I do before the pentest?

Install

curl -fsSL https://raw.githubusercontent.com/sgomez-dev/claude-skills/main/install.sh | bash

After installing with the script, type /security--pentest-prep. Using Cursor, Windsurf or Codex? Platform guides

Demo coming soon

/security--rate-limitingRate limiting design
Designs and adds rate limiting: picks an algorithm, sets per-route budgets, returns 429 with Retry-After and adds tests.
Built here
/security--sanitizeInput sanitization review
Traces where user input enters your code and where it ends up, flags SQL injection, XSS and similar flaws, and proposes the fix.
Built here
/security--secrets-scanLeaked secrets scan
Scans your code, config files and recent git history for API keys, tokens, passwords and private keys, and explains how to remediate each.
Built here
/security--security-auditOWASP security audit
Audits your codebase against the OWASP Top 10 and returns each finding with severity, file and line, a description and a fix.
Built here
/security--threat-modelSTRIDE threat model
Analyzes your repo's architecture and writes threat-model.md with a data-flow diagram, rated STRIDE threats and a top-5 action list.
Built here
/testing--contract-testingContract tests between services
Sets up consumer-driven contract tests (Pact by default) so breakages between services are caught at build time without running both together.
Built here

How to ask for it

Install

More from this section