Web Pentest
Authorized security assessment of a live site you own or have permission to test.
web-pentest runs an authorized black-box, gray-box, or white-box assessment against a live website. Only proceed against a target you own or have explicitly authorized. If authorization is unclear, it confirms before starting.
Invoke
Terminal
$web-pentest https://example.com blackbox
What it does
- Modes: blackbox (default, public surface only), graybox (authenticated low-privilege), whitebox (with internal knowledge the user provided).
- Produces a severity-rated report. It does not replace a human pentest engagement.
- Invoke with a URL. High-level recon and reporting only in this doc; the skill itself enforces authorization.
Install
Included in Premium. Install or refresh with:
Terminal
npx aiblueprint-cli@latest agents pro setup
See Premium setup.