SkillsAdd

transilienceai/communitytools

essential-tools

Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.

First seen Mar 21, 2026

Installation

$ npx skills add transilienceai/communitytools --skill essential-tools
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

agent-browser Shared topics
vercel-labs/agent-browser

Browser automation CLI for AI agents. Use when the user needs to interact with websites, includ…

810.4K installs
azure-diagnostics Shared topics
microsoft/azure-skills

Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe …

568.9K installs
azure-validate Shared topics
microsoft/azure-skills

Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure…

567.7K installs
supabase-postgres-best-practices Shared topics
supabase/agent-skills

Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill …

391.6K installs
godot-3d-essentials Similar name
gamedev-skills/awesome-gamedev-agent-skills

Set up a Godot 4.7 3D scene: Node3D transforms, Camera3D, lighting (DirectionalLight3D/OmniLigh…

2.2K installs
dt-dql-essentials Similar name
dynatrace/dynatrace-for-ai

Core DQL syntax, pitfalls, query patterns, and query optimization. Load to write, build, fix, o…

2.1K installs

Also in this package

Other skills from transilienceai/communitytools · top by installs.

npx skills add transilienceai/communitytools
attack-path-stitcher 653 hackerone 236 osint 174 reconnaissance 166 cve-poc-generator 152 social-engineering 149 source-code-scanning 142 api-security 141 web-app-logic 139 techstack-identification 137

Browse all from transilienceai/communitytools

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 516
License LICENSE
Default branch main
Open issues 8
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,919 B
  • docs SUMMARY.md 179 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 127 installs

SKILL.md

Essential Tools

Core tools, methodology, and reporting standards for penetration testing.

Components

Component Purpose
Burp Suite Proxy, scanner, intruder, repeater, sequencer
Playwright Browser automation, evidence capture, SPA testing
Binary Analysis Static analysis, reverse engineering, string extraction
Nuclei Templated exposure & misconfiguration scanning
sslscan TLS posture (protocols, ciphers, cert)
Methodology PTES, OWASP WSTG, attack prioritization
Reporting Professional report templates, PDF generation

Reference

  • reference/essential-skills*.md - Burp Suite techniques and web security testing methodology
  • reference/playwright-automation.md - Playwright MCP usage for pentesting
  • reference/binary-analysis-quickstart.md - Static analysis for executable files and reverse engineering
  • reference/web-application-attacks.md - Web application attack methodology
  • formats/transilience-report-style/pentest-report.md - Finding quality standards, compliance mapping, and pre-delivery checklist

Required-at-start tooling (web/API engagements)

Run an availability check before declaring recon complete:

command -v subfinder nuclei sslscan httpx; curl -s "https://crt.sh/?q=%25.${DOMAIN}&output=json"; | head -c1

  • Subdomain/CT enum: subfinder, certspotter, crt.sh
  • TLS posture: sslscan
  • Templated exposure: nuclei

If a tool-class is unavailable, record it as an explicit limitation — NEVER declare recon COMPLETE having skipped a whole class. Hand-rolled urllib is not a substitute (see skills/coordination/reference/principles.md 'Real tools before hand-rolled HTTP').