paqad-ai
Version:
Spec-driven development framework — AI agents that think before they type
14 lines (10 loc) • 1.94 kB
Markdown
# Pentest helper skills by step
verified: 2026-11-03
Which helper skill runs at which step of the Procedure. Each helper keeps its own procedure; this skill gathers the output.
| Step | Helper skills |
| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| 1 collect-context | `stride-threat-model` first, then `permission-boundary-review`, `business-logic-abuse-review`, `input-validation-review`, `auth-mechanism-review`, `cryptographic-review`, `logging-monitoring-review`, `rate-limiting-review` |
| 2 run-project-scripts | `dependency-advisory-triage` |
| 3 live-validation | `runtime-surface-probing` |
| 4 synthesize-findings | `finding-normalizer` |
| Retest mode | `retest-verification` |