authenticating

• [Overview](#-overview)
• [Key Features](#-key-features)
• [Architecture](#-architecture)
• [Use Cases](#-use-cases)
• [Available Tools](#-available-tools)
• [Quick Start](#-quick-start)
• [How It Works](#-how-it-works)
• [Contributing](#-contributing)
• [Security & Legal](#-security--legal)
• [Community](#-community)
• [Roadmap](#-roadmap)
• [License](#-license)

---

Transilience AI Community Tools is a comprehensive collection of Claude Code skills, agents, and slash commands for security testing, penetration testing, and bug bounty hunting. This repository provides AI-powered security workflows that run directly in Claude Code, enabling automated vulnerability testing, reconnaissance, and professional security reporting.

What's Inside?

This repository provides a complete Claude Code security testing framework:

• 🎯 7 Security Testing Skills - Pentest, HackerOne, CVE testing, domain assessment, web app mapping
• 🤖 35+ Specialized Agents - SQL injection, XSS, SSRF, JWT, OAuth, SSTI, XXE, and more
• 🔧 6 Orchestration Agents - Multi-phase coordinators (Pentester, HackerOne Hunter, Git workflows)
• 📝 14 Slash Commands - /pentest, /hackerone, /commit, /pr, /issue, /branch, /skiller
• 📚 264+ Lab Walkthroughs - PortSwigger Academy solutions with step-by-step guides
• 📊 Standardized Outputs - Professional reports with CVSS scoring and evidence

Why Choose Transilience Community Tools?

• 🤖 AI-Powered Automation - Claude AI orchestrates intelligent security testing workflows
• 🎯 35+ Specialized Agents - Parallel vulnerability testing across all OWASP categories
• 🔍 Complete OWASP Coverage - 100% OWASP Top 10 + SANS Top 25 CWE testing
• 📊 Professional Reporting - CVSS 3.1, CWE, MITRE ATT&CK, remediation guidance
• 🔬 Playwright Integration - Browser automation for client-side vulnerability testing
• 🎓 Educational Resources - 264+ lab walkthroughs, 46+ attack type documentation
• 📚 Claude Code Native - Works seamlessly in Claude Code IDE with slash commands
• ⚖️ Open Source - MIT licensed for commercial and personal use

---

Claude Code Skills & Agents Framework

This repository provides Claude Code skills, specialized agents, and slash commands for security testing workflows.

```mermaid

graph TB

subgraph "User Interface"

A[Security Researcher
Penetration Tester
Bug Bounty Hunter]

end

subgraph "Claude Code IDE"

B[Slash Commands
/pentest /hackerone /commit]

end

subgraph "Skills Layer .claude/skills/"

C1[Pentest Skill]

C2[HackerOne Skill]

C3[CVE Testing]

C4[Domain Assessment]

C5[Web App Mapping]

C6[Common AppSec]

C7[Authenticating]

end

subgraph "Orchestration Agents .claude/agents/"

D1[Pentester Agent
Multi-phase coordinator]

D2[HackerOne Hunter
Bug bounty workflow]

D3[Git Workflow Agents
Issue/PR/Branch]

D4[Skiller Agent
Skill creation]

end

subgraph "Specialized Agents .claude/agents/specialized/"

E1[SQL Injection]

E2[XSS Testing]

E3[SSRF Detection]

E4[JWT Attack]

E5[OAuth Testing]

E6[SSTI Detection]

E7[XXE Testing]

E8[35+ More Agents]

end

subgraph "Tools & Automation"

F1[Playwright MCP
Browser automation]

F2[HTTP Testing
curl/httpx/requests]

F3[Evidence Capture
Screenshots/Videos]

end

subgraph "Standardized Outputs .claude/output-standards/"

G1[Reconnaissance
inventory/ + analysis/]

G2[Vulnerability Testing
findings/ + evidence/]

G3[Bug Bounty
Platform submissions]

end

A --> B

B --> C1 & C2 & C3 & C4 & C5 & C6 & C7

C1 --> D1

C2 --> D2

C3 & C4 & C5 & C6 --> D1

D1 & D2 --> E1 & E2 & E3 & E4 & E5 & E6 & E7 & E8

E1 & E2 & E3 & E4 & E5 & E6 & E7 & E8 --> F1 & F2 & F3

F1 & F2 & F3 --> G1 & G2 & G3

style B fill:#4CAF50,color:#fff

style D1 fill:#2196F3,color:#fff

style G2 fill:#9C27B0,color:#fff

```

Repository Structure

```

communitytools/

├── .claude/

│ ├── skills/ # Security testing skills

│ │ ├── pentest/ # 46+ attack types, 264+ lab walkthroughs

│ │ ├── hackerone/ # Bug bounty hunting automation

│ │ ├── cve-testing/ # CVE vulnerability testing

│ │ ├── domain-assessment/ # Subdomain discovery, port scanning

│ │ ├── web-application-mapping/ # Endpoint discovery, tech detection

│ │ ├── common-appsec-patterns/ # OWASP Top 10 testing

│ │ └── authenticating/ # Auth testing, 2FA bypass, bot evasion

│ │

│ ├── agents/ # Orchestration agents

│ │ ├── pentester.md # Multi-phase pentest coordinator

│ │ ├── hackerone-hunter.md # Bug bounty workflow orchestrator

│ │ ├── skiller.md # Skill creation/management

│ │ ├── git-*.md # Git workflow automation

│ │ └── specialized/ # 35+ vulnerability-specific agents

│ │ ├── sql-injection-agent.md

│ │ ├── xss-agent.md

│ │ ├── ssrf-agent.md

│ │ ├── jwt-agent.md

│ │ └── ... (31 more)

│ │

│ ├── commands/ # Slash commands

│ │ ├── pentest.md # /pentest command

│ │ ├── hackerone.md # /hackerone command

│ │ ├── commit.md # /commit workflow

│ │ └── ... (11 total)

│ │

│ └── output-standards/ # Standardized output formats

│ ├── OUTPUT_STANDARDS.md

│ └── reference/

│

├── outputs/ # Generated findings and reports

├── CLAUDE.md # Repository-wide instructions

├── CONTRIBUTING.md # Contribution guidelines

└── README.md # This file

```

Multi-Agent Execution Flow

```mermaid

sequenceDiagram

participant User

participant Skill as Pentest Skill

participant Orch as Pentester Agent

participant Agents as Specialized Agents

participant Tools as Playwright/HTTP

participant Output as Standardized Outputs

User->>Skill: /pentest https://target.com

Skill->>Orch: Initialize 7-phase workflow

Orch->>Agents: Phase 1-2: Deploy recon agents

Agents->>Tools: Domain assessment, port scanning

Tools-->>Output: inventory/.json + analysis/.md

Orch->>Agents: Phase 3-4: Deploy 35+ vuln agents in parallel

Agents->>Tools: SQL/XSS/SSRF/JWT/OAuth testing

Tools-->>Output: findings/.json + evidence/.png

Orch->>Output: Phase 5: Generate reports

Output-->>User: Executive + technical reports

Note over Agents,Tools: Specialized agents:
SQL, NoSQL, XSS, SSRF,
JWT, OAuth, SSTI, XXE,
+ 27 more types

```

---

1. Penetration Testing

Execute comprehensive security assessments using the /pentest command:

```bash

# In Claude Code

/pentest

# Deploys 35+ specialized agents to test for:

# - Injection flaw