penetration-tester

A 26-skill penetration testing toolkit that scans live web applications for security headers, SSL/TLS issues, and misconfigurations; audits npm and Python dependencies for vulnerabilities; and performs static code analysis to detect hardcoded secrets, injection flaws, and insecure cryptography. The plugin wraps established tools (requests, bandit, pip-audit, npm audit) with unified reporting, OWASP Top 10 mapping, and remediation guidance—all with authorization checks and chain-of-custody attestability for compliant security assessments.