Open source alternatives to web-app-penetration-testing
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Getgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Getopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Getandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Getmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Getod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Getgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database
About web-app-penetration-testing
web-app-penetration-testing
Pentest a web app or website end to end
web-app-penetration-testing is a Strix skill for an end-to-end pentest of a running web app or website. It runs black-box testing against a live URL, a staging environment or a local dev server, and can use the source as well when that helps. Every reported finding is validated with a working exploit, so the output has no signature-based false positives to triage. The workflow starts by confirming authorization and scope. The target must be yours or one you are explicitly authorized to test, and you must not test a third-party site on a hunch. It asks which environment to use, prefers staging over production because the agents send real exploit payloads and create or change data, and it lists the out-of-scope areas to avoid, such as payment flows, mass-email endpoints, destructive admin actions and third-party single sign-on providers. It also asks for test credentials, because most real vulnerabilities sit behind a login, and without a test account the agents only see the public surface. The skill asks for anything missing rather than guessing. It is for developers and security teams who want a web application exercised against real attacks before release. For installation details and the managed cloud route, the penetration-testing-with-strix skill is the reference. It passes Gen Agent Trust Hub on skills.sh, and Socket and Snyk show warnings. It has about 10,300 installs. Install it with npx skills add https://github.com/usestrix/strix --skill web-app-penetration-testing.
- Price
- Free
- Made by
- usestrix
- Category
- AI Skills
- Website
- github.com/usestrix/strix/web-app-penetration-testing