Pentest Audit

In-depth security audit and penetration testing of web, API, and mobile applications. Static source-code analysis, dynamic testing, configuration checks, and generation of structured reports with severity ratings and recommendations. Use this skill whenever the user mentions: pentest, security audit, vulnerability, OWASP, SQL injection, XSS, CSRF, SSRF, IDOR, broken access control, security review, security headers, CSP, CORS, TLS, exposed secrets, fuzzing, security scan, 'is this secure', 'check the security', 'find the flaws', 'audit this code', 'penetration test', 'security check', or any question involving the security of an application, an API, or application infrastructure. Also trigger when the user shares code and asks whether there are potential security issues, even implicitly. Do NOT use for pure architecture questions (that's architecture-conceptor) or for code review without a security angle (that's senior-dev).

mkdir -p ~/.claude/skills/pentest-audit
curl -L https://claudskills.com/skills/pentest-audit/SKILL.md \
  -o ~/.claude/skills/pentest-audit/SKILL.md

@misc{pentest-audit-2026,
  author    = {tinkybeatz},
  title     = {Pentest Audit [Claude Code skill]},
  year      = {2026},
  publisher = {ClaudSkills},
  url       = {https://claudskills.com/skills/pentest-audit/}
}