Menu

Individual skill

kali-pentest

0upvotes

Execute authorized penetration testing via Kali Linux CLI tools over SSH or Docker. Covers: information gathering, vulnerability analysis, sniffing & spoofing, web/API testing, exploitation, password attacks, wireless, cloud-native security, RFID/NFC, VoIP/ICS, reverse engineering, forensics, post-exploitation/C2, and reporting.

kali-pentest/SKILL.md

Read pinned source

Source commit 43138c5eee3c30848f704301f834c2426940563d

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
Yes
Repository scan complete
No
Skill scan complete
No
Observed behavior
Network or broad shell
Last checked
Nov 11, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
183
Repository last updated
Jun 25, 2026
License
Apache-2.0

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Declared tags are partial or unavailable.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# Kali Pentest Skill

## Security Constraints (Read First)

1. **Authorization is mandatory**: never scan or probe any target without confirmed written authorization from the user.
2. **Scope is binding**: only test the hosts, domains, ports, accounts, and techniques that the user has authorized.
3. **Risk confirmation**: High/Critical operations require explicit user approval before execution.
4. **Prohibited**: attacking unauthorized targets, destructive operations on production systems, modifying/deleting/encrypting target files without explicit request, attacking critical infrastructure.

High-risk operations include exploitation, credential spraying, brute forcing, NTLM relay, phishing, wireless attacks, persistence, data exfiltration, DoS-like scans, and intrusive vulnerability checks.

## Step 1: Determine Execution Environment

Check the user's message for connection details. If not provided, ask the user.
Back to top