Skip to content
cccskills
FreePublished on GitHub

pen-tester

Port-scan, deps, permissions, network, password hygiene.

The English summary is being prepared. Showing the original description.

openamer/openamer
See how to install

Files included (1)

  • SKILL.md1.7 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

pen-tester — Automatisierter Security-Audit

Führt vollständigen Security-Audit durch: Port-Scan, Dependency-Audit, File-Permissions, Network-Exposure, Password-Hygiene. Erzeugt HTML + JSON Reports mit CVSS-ähnlichem Scoring.

CLI

# Quick-Modus (Port + Permissions) — ideal für Cron alle 4h
python scripts/pen-tester.py --quick

# Full-Modus (alle Checks)
python scripts/pen-tester.py --full

# Mit Report-Speicherung
python scripts/pen-tester.py --full --report reports/

# Nur Console (keine Dateien)
python scripts/pen-tester.py --quick --stdout

Exit-Codes

CodeBedeutung
0Sicher / keine Funde
1Warnungen (low/medium)
2Kritisch (high/critical)

Checks

  1. Port-Scan — 30+ Common Ports (22,80,443,3306,5432,6379,27017,…) auf localhost + LAN-IP. Threaded parallel (50 Worker), ~4s.
  2. Dependency-Audit — pip-audit (falls installiert) sonst pip list --outdated. Erkennt CVEs.
  3. File-Permissions — .env, config.yaml, .backup_key auf korrekte Berechtigungen. Windows: Everyone/Users. Unix: group/other Bits.
  4. Network-Exposure — netstat -ano auf 0.0.0.0/[::]-Bindungen. Warnt bei externer Erreichbarkeit.
  5. Password-Hygiene — Scannt Configs auf Standard-Passwörter (admin, password, 123456, your-api-key) + API-Key-Zählung.

Reports

  • HTML: Dark-Theme mit Risk-Score-Ring, Summary-Cards, Findings-Tabelle.
  • JSON: Maschinenlesbar mit CVSS-Scoring und Severity-Zählung.

Pfad

Script: $OPENAMER_HOME/scripts/pen-tester.py (Default: ~/AppData/Local/openamer-laptop/scripts/)

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

3-statement-model

Free

Build integrated IS/BS/CF financial workbooks in Excel.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

a2a-swarm

Free

Run and grow the OpenAmer Agent-to-Agent swarm: identity, trust, node-to-node ask, signed skill/insight sharing, and the autonomous self-learning loop.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

ab-test-engine

Free

Use for A/B experiments on OpenAmer configs and skills.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

adversarial-ux-test

Free

Roleplay a hostile user to find and triage UX pain points.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

agent-mesh

Free

Agent mesh: master/worker nodes, HTTP delegation, heartbeat.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

agentic-commerce-payments

Free

Use for agentic commerce payments tasks. Candidate synthesized from trend radar; awaiting trial promotion.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

See all skills by openamer

Report a problem with this skill