Penetration testing & red team

The top-rated launch-quality Penetration testing & red team skill for AI agents is testing-api-for-mass-assignment-vulnerability (grade A), followed by exploiting-ms17-010-eternalblue-vulnerability and ctf-kit. Skillspace rates 1,668 Penetration testing & red team skills; 242 are launch-quality.

Offensive security: pentesting methodology, CTF, exploitation, recon, OSINT for security assessments.

Launch-quality skills first, then by grade, then by our Skill Score, which adds judge reviews, test results, GitHub stars and adoption.

  1. testing-api-for-mass-assignment-vulnerability A
  2. exploiting-ms17-010-eternalblue-vulnerability A
  3. ctf-kit A
  4. onionclaw B
  5. decepticon B
  6. re-js-app B
  7. xss-testing B
  8. shodan B
  9. censys B
  10. port-service-discovery B
  11. stealth-browser-launch B
  12. visual-recon B
  13. wp-plugin-rest-auth-bypass B
  14. attack-patterns-reference B
  15. error-log-mining B
  16. exploiting-arbitrary-write-to-execution B
  17. pentesting-dns B
  18. bypassing-binary-exploitation-mitigations B
  19. exploiting-glibc-heap-vulnerabilities B
  20. exploiting-linux-kernel-vulnerabilities B
  21. performing-return-oriented-programming B
  22. performing-windows-binary-exploitation B
  23. elf-patcher B
  24. network-attack B
  25. windows-mitigations-bypass B

Frequently asked questions

What is the best Penetration testing & red team skill for AI agents?

The top-rated launch-quality Penetration testing & red team skill for AI agents is testing-api-for-mass-assignment-vulnerability (grade A), followed by exploiting-ms17-010-eternalblue-vulnerability and ctf-kit. Skillspace rates 1,668 Penetration testing & red team skills; 242 are launch-quality.

How does Skillspace rate Penetration testing & red team skills?

Skillspace grades every Penetration testing & red team skill from A to F with a published scoring engine that reads the skill's SKILL.md: architecture and maturity make the score, and a security scan can cap it. In crowded categories, a judge model also compares the strongest contenders side by side, and some skills are tested head-to-head on real tasks against other skills in the same category (including a deliberately weak one) and a no-skill baseline. Launch-quality skills are graded A to C with a clean safety verdict, and not excluded by a quality filter: the filters catch skills our model's safety screen flags for prompt injection, guardrail bypass, harmful content or credential exposure; test fixtures and attack benchmarks; skills written only for the repository they live in; templates and stubs; and near-duplicate variants and copies of other skills. Ratings were last updated on 24 September 2026; the full method is on the methodology page.

Are Penetration testing & red team skills safe to install?

Of the 1,668 Penetration testing & red team skills Skillspace rates, 1,134 passed its safety scan with no flag from its model, and 534 are flagged: 21 for review, 453 as risky, 53 as unsafe, 3 as attack benchmarks and 4 as test fixtures. Each skill's page shows its safety verdict. A pass is not a guarantee: the scan reads only the skill's SKILL.md, not the scripts or other files it ships, and looks for patterns such as piping a remote script into a shell, reading credentials or hiding actions from the user. Skills are third-party code that Skillspace indexes but does not host or endorse, so read a skill's source on GitHub before you install it.

Skillspace indexes and rates skills; it does not host or endorse them. Run third-party skills at your own risk.