Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 9/8/2026.claude/skills/pentest-lyanRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
Real Skill packageSource verifiedClawHub registry
pentest-lyan
授权 Web 渗透测试 Skill。模型自主威胁建模，JSON Schema 校验状态文件结构，输出按功能列出测了哪些威胁。 Use when user asks to perform authorized web penetration testing, vulnerability assessment on a web application, security testing with an explicit target URL, or asks to evaluate web application security posture. Do NOT use for unauthori
Identity and source
Publisher attributionInkLinregistry owner unverified by skillvetai
Functional categoryAgent Engineering, Security & Governanceautomatically inferred · 71% rule confidence
Package forminstruction with code30 recorded files
Canonical sourceClawHub registryclawhub:ink5725:pentest-lyan
Platform declarations
These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.
OpenClawnative officialProvenance: registry distribution
Independent structural checks
These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.
OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 9/8/2026.agents/skills/pentest-lyanRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 9/8/2026skills/pentest-lyanRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
Installation and inspection
This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.
clawhub install @ink5725/pentest-lyanclawhub inspect @ink5725/pentest-lyan --version 1.0.0Security evidence
SkillVetAI static result: no findings detected
This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.
- Status
- completed
- Coverage
- full text content
- Files
- 30 / 30 inspected as text
- Checked
- 9/8/2026, 4:44:18 PM
- Scanner
- 0.1.3
- Policy
- 1.0.3
3 inferred permission indicators
- network access — automatically inferred
- filesystem write — automatically inferred
- browser control — automatically inferred
8 dependency and API indicators
- api: ...
- api: clawhub.ai
- api: github.com
- api: json-schema.org
- api: pentest-skill-v2
- api: schemas.openxmlformats.org
- api: target.example.com
- api: www.first.org
External clawhub result: suspicious
This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.
- Evidence checked
- 9/8/2026, 8:14:17 AM
- Release binding
- Matches this record
- skillspector: suspicious
- llm: suspicious
Recorded files
The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.
Package content hash
sha256:8db65c2ce15ef1ca6573264a008105ee67592b39dc1fe22605014d6ed3cd5cb4Show up to 30 recorded paths
.gitignoregates.mdLICENSEREADME.mdreferences/attack-guide.mdreferences/audit-guide.mdreferences/cross-role-testing.mdreferences/discovery-guide.mdreferences/docx-template.mdreferences/post-delivery.mdreferences/report-template.mdreferences/schema-data-flow.mdreferences/schema-guide.mdreferences/threat-modeling.mdreferences/validation-guide.mdschema.mdschema/account.schema.jsonschema/coverage.schema.jsonschema/index.schema.jsonschema/module_queue.schema.jsonschema/module.schema.jsonschema/pages.schema.jsonschema/sessions_pool.schema.jsonschema/state.schema.jsonschema/summary.schema.jsonscripts/render_docx.pyskill-card.mdSKILL.mdtemplates/.gitignoretest-results.md
Source changelog
pentest-lyan v1.0.0 - Initial release of pentest-lyan, a web penetration testing skill focused on authorized, structured, and methodology-driven security assessments. - Implements strict, multi-phase workflow: Discovery, Attack, and Audit, with comprehensive exit/gate conditions for each stage. - Automates threat modeling using 12 customized dimensions; systematizes validation and reporting through state files and JSON Schema enforcement. - Enforces rigorous rules (banned patterns, required documentation, authorization checks) to ensure ethical and accurate testing. - Adapts to different testing environments, supporting both browser automation and command-line (curl) workflows. - Provides clear documentation requirements, state file structures, and recovery processes for reliable, auditable penetration testing.