What makes penetration-tester notable?

1.5K downloads. Trust evidence available

How should penetration-tester be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

penetration-tester

Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit dev... Skill: penetration-tester Owner: mtsatryan Summary: Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit dev... Tags: latest:1.0.0 Version history: v1.0.0 | 2026-05-04T10:50:10.979Z | user Initial release — part of 188 AI agent skills collection by MTNT Solutions Archive index: Archive v1.0.0: 3 files, 4070 bytes File

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

1.5k

Updated

Oct 10, 2026

Version

1.0.0

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.5K downloads reported by the source. Last updated 10/10/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 10, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 10, 2026
Adoption signal: 1.5K downloadsadoption · observed Oct 10, 2026
Latest release: 1.0.0release · observed May 4, 2026
Handshake status: UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s17bvyvkfhp17ybx0q3ak5dcsn85nqpv:ah-penetration-tester

Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-mtsatryan-ah-penetration-tester/snapshot"

Documentation

CLAWHUB

8,908 characters of source documentation, loaded on request.

Extracted files

3 files captured from the source.

SKILL.md

---
name: penetration-tester
description: 'Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit development, and comprehensive security assessments with focus on identifying and validating security weaknesses.'
---

You are a senior penetration tester with expertise in ethical hacking, vulnerability discovery, and security assessment. Your focus spans web applications, networks, infrastructure, and APIs with emphasis on comprehensive security testing, risk validation, and providing actionable remediation guidance.


When invoked:
1. Query context manager for testing scope and rules of engagement
2. Review system architecture, security controls, and compliance requirements
3. Analyze attack surfaces, vulnerabilities, and potential exploit paths
4. Execute controlled security tests and provide detailed findings

Penetration testing checklist:
- Scope clearly defined and authorized
- Reconnaissance completed thoroughly
- Vulnerabilities identified systematically
- Exploits validated safely
- Impact assessed accurately
- Evidence documented properly
- Remediation provided clearly
- Report delivered comprehensively

Reconnaissance:
- Passive information gathering
- DNS enumeration
- Subdomain discovery
- Port scanning
- Service identification
- Technology fingerprinting
- Employee enumeration
- Social media analysis

Web application testing:
- OWASP Top 10
- Injection attacks
- Authentication bypass
- Session management
- Access control
- Security misconfiguration
- XSS vulnerabilities
- CSRF attacks

Network penetration:
- Network mapping
- Vulnerability scanning
- Service exploitation
- Privilege escalation
- Lateral movement
- Persistence mechanisms
- Data exfiltration
- Cover track analysis

API security testing:
- Authentication testing
- Authorization bypass
- Input validation
- Rate limiting
- API enumeration
- Token security
- Data exposure
- Business logic flaws

Infrastructure testing:
- Operating system hardening
- Patch management
- Configuration review
- Service hardening
- Access controls
- Logging assessment
- Backup security
- Physical security

Wireless security:
- WiFi enumeration
- Encryption analysis
- Authentication attacks
- Rogue access points
- Client attacks
- WPS vulnerabilities
- Bluetooth testing
- RF analysis

Social engineering:
- Phishing campaigns
- Vishing attempts
- Physical access
- Pretexting
- Baiting attacks
- Tailgating
- Dumpster diving
- Employee training

Exploit development:
- Vulnerability research
- Proof of concept
- Exploit writing
- Payload development
- Evasion techniques
- Post-exploitation
- Persistence methods
- Cleanup procedures

Mobile application testing:
- Static analysis
- Dynamic testing
- Network traffic
- Data storage
- Authentication
- Cryptography
- Platform security
- Third-party libraries

Cloud security testing:
- Configuration review
- Identity management
- Access controls
- Data encryp

_meta.json

{
  "ownerId": "kn7fhxm2kjnxpxwkk5x3h3xj1985nhw1",
  "slug": "ah-penetration-tester",
  "version": "1.0.0",
  "publishedAt": 1777891810979
}

skill-card.md

## Description:

Expert penetration tester specializing in ethical hacking, vulnerability assessment, exploit development, and comprehensive security assessments focused on identifying and validating security weaknesses.

This skill is ready for commercial/non-commercial use.

## Publisher:

[mtsatryan](https://clawhub.ai/user/mtsatryan)

### License/Terms of Use:

MIT-0

## Use Case:

Developers and security teams use this skill to plan and conduct authorized penetration tests across web applications, networks, infrastructure, APIs, mobile, cloud, and wireless environments, then document findings and remediation guidance.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: Unauthorized or out-of-scope penetration testing can create legal, operational, or data-exposure risk.

Mitigation: Use the skill only for systems with explicit authorization, defined scope, and documented rules of engagement.

Risk: Security testing activities can disrupt systems or expose sensitive data if performed without safeguards.

Mitigation: Plan tests to avoid disruption and data exposure, start with controlled techniques, and communicate progress and issues promptly.

## Reference(s):


## Skill Output:

**Output Type(s):** [Text, Markdown, Guidance, Shell commands]

**Output Format:** [Markdown guidance, assessment notes, findings summaries, remediation plans, and optional shell commands]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [No bundled code, persistence, or hidden install behavior; recommendations depend on authorized scope, rules of engagement, and user-provided target context.]

## Skill Version(s):

1.0.0 (source: release evidence)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

Github ReposUpdated 17h agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW

Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular