security-pen-testing

原文涵盖的主题

• Security Penetration Testing
• Table of Contents
• Overview
• What This Skill Does
• Distinction from Other Security Skills
• Prerequisites
• OWASP Top 10 Systematic Audit
• Quick Reference (OWASP Top 10:2025)

Hands-on offensive security testing skill for finding vulnerabilities before attackers do. This is NOT compliance checking (see senior-secops) or security policy writing (see senior-security) — this is about systematic vulnerability discovery through authorized testing. -- Overview OWASP Top 10 Systematic Audit Static Analysis Dependency Vulnerability Scanning Secret Scanning API Security Testing Web Vulnerability Testing Infrastructure Security Pen Test Report Generation Responsible Disclosure Workflow Workflows Anti-Patterns Cross-References -- This skill provides the methodology, checklists, and automation for offensive security testing — actively probing systems to discover exploitable vulnerabilities. It covers web applications, APIs, infrastructure, and supply chain security. | Skill | Focus | Approach | |-------|-------|----------| | security-pen-testing (this) | Finding vulnerabilities | Offensive — simulate attacker techniques | | senior-secops | Security operations | Defensive — monitoring, incident response, SIEM | | senior-security | Security policy | Governance — policies, frameworks, risk registers | | skill-security-auditor | CI/CD gates | Automated — pre-merge secur

这里只展示节选，请以完整原文和当前要求为准。