A community-driven registry for the Claude Code ecosystem. Not affiliated with Anthropic.
Are you the author? Sign in to claim
Transform Claude Code into your personal penetration testing assistant with specialized security skills and expert AI su
Transform Claude Code into your personal penetration testing assistant with 16 specialized security skills and 6 expert AI subagents.
SecSkills is a plugin for Claude Code that gives Claude deep expertise in offensive security and penetration testing. Instead of generic security advice, you get:
Think of it as having a team of penetration testers available 24/7 through Claude Code.
Prerequisites:
Option A: Via Claude Code (Recommended)
/plugin marketplace add trilwu/secskills
/plugin install trilwu/secskills
/plugin enable secskills
Option B: Manual Installation
git clone https://github.com/trilwu/secskills ~/.claude/plugins/secskills
In Claude Code, type:
/plugin list
You should see secskills in the list of enabled plugins.
Simply ask Claude in natural language:
Example 1: Web Application Testing
"How do I test this login form for SQL injection?"
→ The web application security skill automatically activates with SQLi techniques
Example 2: Cloud Security
"I found AWS keys in a GitHub repo. How do I enumerate what they can access?"
→ The cloud-pentester subagent activates and provides enumeration commands
Example 3: Active Directory
"I need to Kerberoast this domain. Walk me through it."
→ The pentester subagent provides step-by-step Kerberoasting commands
That's it! Claude now has expert-level security knowledge.
Skills are like reference libraries. When you mention a security topic (like "SQLi", "Kerberos", "Docker escape"), Claude automatically uses the relevant skill to provide accurate commands and techniques.
16 Skills Available:
Subagents are specialized AI experts that can handle complex, multi-step security tasks autonomously. They automatically activate based on context or can be explicitly invoked.
6 Subagents Available:
pentester - General pentesting (web, AD, infrastructure)cloud-pentester - AWS, Azure, GCP securitymobile-pentester - Android and iOS app testingweb3-auditor - Smart contract auditingred-team-operator - Post-exploitation and persistencerecon-specialist - OSINT and reconnaissanceAutomatic Invocation:
"Test this web application" → pentester activates
"Audit this Solidity contract" → web3-auditor activates
"Find subdomains for example.com" → recon-specialist activates
Manual Invocation:
"Use the cloud-pentester to assess my AWS account"
"Have the mobile-pentester analyze this APK"
"Get the recon-specialist to map the attack surface"
You: "I want to test if this endpoint is vulnerable to SQL injection:
https://example.com/api/users?id=1"
Claude: [Activates web application security skill]
Here's how to test for SQL injection:
1. Basic injection test:
curl "https://example.com/api/users?id=1'"
2. Boolean-based test:
curl "https://example.com/api/users?id=1 AND 1=1"
3. Automated with SQLMap:
sqlmap -u "https://example.com/api/users?id=1" --batch
[Provides full testing methodology...]
You: "I have AWS access keys. How do I see what I can access?"
Claude: [Activates cloud-pentester subagent]
I'll help enumerate AWS permissions. Here's the process:
1. Verify credentials:
aws sts get-caller-identity
2. List permissions (if allowed):
aws iam get-user
aws iam list-attached-user-policies
3. Enumerate resources:
aws s3 ls
aws ec2 describe-instances
[Provides comprehensive enumeration guide...]
You: "I need to perform a web application penetration test on example.com"
Claude: [Activates pentester subagent]
I'll guide you through a comprehensive web application pentest:
Phase 1: Reconnaissance
[Detailed recon commands...]
Phase 2: Vulnerability Discovery
[Testing methodology...]
Phase 3: Exploitation
[Exploitation techniques...]
[Provides full pentest methodology with commands...]
Ask Claude a security question like "How do I test for SQL injection?" - if you get detailed commands and techniques, it's working!
No, the plugin only provides knowledge. You'll need to install tools like nmap, sqlmap, burpsuite, etc. separately if you want to run the commands.
Absolutely not. This plugin is for authorized security testing only. Always get written permission before testing any system you don't own.
pentestercloud-pentestermobile-pentesterweb3-auditorred-team-operatorrecon-specialistcd ~/.claude/plugins/secskills
git pull origin main
Yes! Fork the repository, add your skill following the format in skills/, and submit a pull request.
/plugin list# Check if plugin directory exists
ls ~/.claude/plugins/secskills
# If not, clone it manually
git clone https://github.com/trilwu/secskills ~/.claude/plugins/secskills
# Restart Claude Code
Try being more specific with security terminology:
Or explicitly invoke a subagent:
"Use the pentester to test this application"
The plugin provides Linux/Kali-based commands by default. For Windows, you may need to:
"I'm testing a bug bounty program for example.com. Walk me through the recon phase."
→ recon-specialist provides full OSINT methodology
"Test this login endpoint for common vulnerabilities: https://app.example.com/login"
→ pentester checks for SQLi, XSS, auth bypass, etc.
"I have access to 10.10.10.0/24. Help me enumerate and exploit services."
→ pentester provides network scanning and exploitation techniques
"I need to audit our AWS infrastructure for misconfigurations."
→ cloud-pentester provides AWS security assessment commands
"Analyze this APK file for security issues: app.apk"
→ mobile-pentester walks through static and dynamic analysis
"Review this Solidity contract for vulnerabilities: [paste code]"
→ web3-auditor checks for reentrancy, overflow, access control issues
❌ "How do I hack this?" ✅ "How do I test this web form for SQL injection vulnerabilities?"
Tell Claude:
For multi-step tasks, explicitly invoke a subagent:
"Use the pentester to perform a full security assessment of this application"
"Explain how this Kerberoasting attack works before showing me the commands"
"Show me both a manual approach and an automated tool for this"
"First use recon-specialist to map the attack surface, then use pentester to test vulnerabilities"
We welcome contributions! Here's how you can help:
skills/Contribution Guidelines:
IMPORTANT: READ BEFORE USE
This plugin is designed for: ✅ Authorized penetration testing with written permission ✅ Bug bounty programs within defined scope ✅ Security research on owned/controlled systems ✅ Educational purposes in lab environments ✅ CTF competitions and security challenges ✅ Defensive security and threat intelligence
This plugin is NOT for: ❌ Unauthorized access to systems ❌ Illegal hacking or computer crime ❌ Violating terms of service ❌ Malicious activities
You are responsible for:
The authors and contributors:
By using this plugin, you agree to use it only for lawful, authorized purposes.
Made with ❤️ by the security community for ethical hackers worldwide.
Remember: With great power comes great responsibility. Always hack ethically and with authorization.
1000+ skills curated from Anthropic, Vercel, Stripe, and other engineering teams
@user_bdd01887CommunityDesign enforcement with memory — keeps your UI consistent across a project
Universal SEO skill for Claude Code. 25 sub-skills + 18 sub-agents covering technical SEO, E-E-A-T, schema, GEO/AEO, bac
Route Claude Code traffic to any of 17 provider backends including free or local models
