essential-tools
Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.
Skill by transilienceai
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/transilienceai-essential-tools
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: testing
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/essential-tools
What's inside
- Skill name
essential-tools- Description
- Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.
- License
- MIT
- Instructions
- 37 lines in SKILL.md · view on GitHub
Before installing
- Instructions call the network
Files (9)
- SKILL.md
- binary-analysis-quickstart.md · reference/
- coding-challenges.md · reference/
- essential-skills-cheat-sheet.md · reference/
- essential-skills-index.md · reference/
- essential-skills-quickstart.md · reference/
- essential-skills-resources.md · reference/
- playwright-automation.md · reference/
- web-application-attacks.md · reference/
SKILL.md (first lines)
# Essential Tools
Core tools, methodology, and reporting standards for penetration testing.
## Components
| Component | Purpose |
|-----------|---------|
| **Burp Suite** | Proxy, scanner, intruder, repeater, sequencer |
| **Playwright** | Browser automation, evidence capture, SPA testing |
| **Binary Analysis** | Static analysis, reverse engineering, string extraction |
| **Nuclei** | Templated exposure & misconfiguration scanning |
| **sslscan** | TLS posture (protocols, ciphers, cert) |
| **Methodology** | PTES, OWASP WSTG, attack prioritization |
| **Reporting** | Professional report templates, PDF generation |
## Reference
- `reference/essential-skills*.md` - Burp Suite techniques and web security testing methodology
- `reference/playwright-automation.md` - Playwright MCP usage for pentesting
- `reference/binary-analysis-quickstart.md` - Static analysis for executable files and reverse engineering
- `reference/web-application-attacks.md` - Web application attack methodology
- `formats/transilience-report-style/pentest-report.md` - Finding quality standards, compliance mapping, and pre-delivery checklist
## Required-at-start tooling (web/API engagements)
Run an availability check before declaring recon complete:
`command -v subfinder nuclei sslscan httpx; curl -s "https://crt.sh/?q=%25.${DOMAIN}&output=json" | head -c1`
- Subdomain/CT enum: subfinder, certspotter, crt.sh
- TLS posture: sslscan
- Templated exposure: nuclei
If a tool-class is unavailable, record it as an explicit limitation — NEVER declare recon COMPLETE having skipped a whole class. Hand-rolled urllib is not a substitute (see skills/coordination/reference/principles.md 'Real tools before hand-rolled HTTP').From transilienceai/communitytools, MIT.
More from transilienceai/communitytools
- 0.764score
mobile-security
transilienceai
Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native…
SkillBFreshness: B★ 591Claude Code +9 - 0.764score
pentest-engagement
transilienceai
Run a professional penetration engagement OR a network vulnerability scan from a scope.
SkillBFreshness: B★ 591Claude Code +9 - 0.764score
firewall-review
transilienceai
Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (17 vendor-agnostic plus 5 FortiGate-specific), a 15-check…
SkillBFreshness: B★ 591Claude Code +9 - 0.761score
coordination
transilienceai
Pentest coordination — orchestrates executor and validator agents with context-controlled spawning.
SkillBFreshness: B★ 591Claude Code +9 - 0.761score
transilience-report-style
transilienceai
Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab…
SkillBFreshness: B★ 591Claude Code +9 - 0.761score
ai-threat-testing
transilienceai
Offensive AI security testing and exploitation framework.
SkillBFreshness: B★ 591Claude Code +9 - 0.760score
skill-update
transilienceai
Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits.
SkillBFreshness: B★ 591Claude Code +9 - 0.757score
hackthebox
transilienceai
HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
SkillBFreshness: B★ 591Claude Code +9 - 0.757score
cloud-containers
transilienceai
Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.
SkillBFreshness: B★ 591Claude Code +9 - 0.707score
authenticated-session-acquisition
transilienceai
Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors…
SkillCFreshness: C★ 591Claude Code +9 - 0.707score
pci-secure-software
transilienceai
Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation.
SkillCFreshness: C★ 591Claude Code +9 - 0.707score
network-appliance-offensive
transilienceai
Offensive testing of perimeter network appliances and VPN crypto — IKE/IPsec (aggressive-mode, transform/DH enum, NAT-T), Check Point SIC/OPSEC, safe…
SkillCFreshness: C★ 591Claude Code +9
Compare and alternatives
Featured in
Signals
- Stars
- 591
- Forks
- 83
- Open issues
- 10
- Last commit (this folder)
- Jun 9, 2026 (4 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/transilienceai/communitytools
- Website
- www.transilience.ai/
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
Same skill elsewhere
Copies of this SKILL.md published by others; search shows only one of them.
- 0.307score
essential-tools
LeoWSY-hashblue
Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.
SkillCFreshness: C★ 3Claude Code +9 - 0.283score
essential-tools
gohilrajbha0312
Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.
SkillCFreshness: CClaude Code +9 - 0.244score
essential-tools
mdriscoll-ct
Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.
SkillDFreshness: DClaude Code +9
More from transilienceai
- 0.764score
mobile-security
transilienceai
Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native…
SkillBFreshness: B★ 591Claude Code +9 - 0.764score
pentest-engagement
transilienceai
Run a professional penetration engagement OR a network vulnerability scan from a scope.
SkillBFreshness: B★ 591Claude Code +9 - 0.764score
firewall-review
transilienceai
Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (17 vendor-agnostic plus 5 FortiGate-specific), a 15-check…
SkillBFreshness: B★ 591Claude Code +9 - 0.761score
coordination
transilienceai
Pentest coordination — orchestrates executor and validator agents with context-controlled spawning.
SkillBFreshness: B★ 591Claude Code +9 - 0.761score
ai-threat-testing
transilienceai
Offensive AI security testing and exploitation framework.
SkillBFreshness: B★ 591Claude Code +9 - 0.761score
transilience-report-style
transilienceai
Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab…
SkillBFreshness: B★ 591Claude Code +9
Cite this page
essential-tools skill. Agent Mart. https://agentmart.dev/skills/transilienceai-essential-tools (last updated 2026-10-24)