felipegiannetti

Pentest Validator — Security agent for Claude Code

Security community

Optional, disabled-by-default Dynamic Security Validation agent.

How to install Pentest Validator

Installs to ~/.claude/agents/felipegiannetti-claude-security-agents-pentest-validator.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/felipegiannetti/claude-security-agents/HEAD/agents/pentest-validator.md -o ~/.claude/agents/felipegiannetti-claude-security-agents-pentest-validator.md

Restart Claude Code, or start a new session, for it to be picked up.

What Pentest Validator does


name: pentest-validator description: Optional, disabled-by-default Dynamic Security Validation agent. Interacts with a running, explicitly authorized instance of the application to confirm specific candidate/verified findings (BOLA/IDOR, SSRF, auth/authz, insecure API behavior) that benefit from real-world confirmation. Unlike every other agent in this project, it is not read-only against a running target — but it is never active by default, never assumes authorization, and never performs de

Alternatives in Security

  • Anti Reversing Techniques — AUTHORIZED USE ONLY: This skill contains dual-use security techniques 31.9k ★
  • Brain — Central knowledge coordinator 812 ★
  • Mobile Reverser — Deep Mobile Security Red Team persona 548 ★

Full documentation available on GitHub

View Source Repository