openghost-skill

openghost-skill is a Penetration testing & red team skill for AI agents, published by VAIBHAVSING in the openghost repository on GitHub. Skillspace rates openghost-skill D (67/100) and it passed the safety scan; the rating is based on static analysis only.

Agent skill for authorized web application and supporting server integrity penetration testing. Use for scoped OWASP WSTG and OWASP API Top 10 assessments, authenticated web app pentests, API and browser validation, attack-surface mapping, ZAP-backed DAST, evidence-backed vulnerability validation, CVSS/risk triage, and report generation. Security tooling must run through the bundled `openghost` Docker sandbox launcher, with explicit authorization, scope, and evidence controls.

Grade
D
Quality
67 / 100
Safety
Passed
GitHub stars
37

Unproven: rated by static analysis only, not yet compared head-to-head.

Our two independent classifiers differ on this skill's category, so treat the placement as provisional.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Our review

Architecture
76 / 100
Maturity
Structured: ships references or scripts
Security scan
No issues found
License
Apache-2.0
Adoption
Adopted by 0 other repositories, in 0 collections

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.