agentsclimarketplace
Sign in

Pentest injection engine

Skill 0x-Professor/Agent-Skills-Hub/skills/pentest-injection-engine

Systematically test authorized targets for SQL, XSS, SSTI, XXE, command, and request-smuggling injection classes.From its SKILL.md

Install
npx -y skills add 0x-Professor/Agent-Skills-Hub --skill pentest-injection-engine

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • 10 stars10 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
  • runs commandsInstructs the agent to run 1 command, including `python skills/pentest-injection-engine/scripts/injection_engine.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run`.

SKILL.md

1.3 KB, 288 tokens by cl100k_base, as published. Nobody here has run it

Pentest Injection Engine

Stage

  • PTES: 5
  • MITRE: T1190, T1059

Objective

Validate injection exploitability and capture payload-level evidence.

Required Workflow

  1. Validate scope before any active action and reject out-of-scope targets.
  2. Run only authorized checks aligned to PTES, OWASP WSTG, NIST SP 800-115, and MITRE ATT&CK.
  3. Write findings in canonical finding_schema format with reproducible PoC notes.
  4. Honor dry-run mode and require explicit --i-have-authorization for live execution.
  5. Export deterministic artifacts for downstream skill consumption.

Execution

python skills/pentest-injection-engine/scripts/injection_engine.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run

Outputs

  • injection-findings.json
  • xss-payloads-that-fired.json
  • injection-report.json

References

  • references/tools.md
  • skills/autonomous-pentester/shared/scope_schema.json
  • skills/autonomous-pentester/shared/finding_schema.json

Legal and Ethical Notice

WARNING AUTHORIZED USE ONLY
This skill executes real security testing tools against live targets.
Use only with written authorization.

What ships with it: 4 files

4.5 KB alongside SKILL.md, 1 of them executable

agents/

assets/

references/

scripts/

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.