Pentest Auth Bypass

Test authentication and session management controls for bypass and account takeover scenarios.

This skill appears coherent for authorized pentesting, but before running it: (1) verify you have written authorization and use --dry-run first; (2) inspect the shared module (autonomous-pentester/shared/pentest_common) to see what external tools or network actions it performs during non-dry-run runs; (3) run tests in an isolated environment and point outputs to a safe folder; (4) confirm scope.json accurately represents authorized targets. If you cannot review the shared helpers, avoid running non-dry-run executions against live targets.

Type: OpenClaw Skill Name: pentest-auth-bypass Version: 0.1.0 The OpenClaw skill bundle 'pentest-auth-bypass' is designed for authorized security testing, with robust safeguards in place. The SKILL.md and agents/openai.yaml explicitly emphasize scope validation, authorization, and dry-run mode. The core script, scripts/auth_bypass.py, enforces these checks and, critically, only generates *placeholder* output artifacts rather than executing actual authentication bypass attacks. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection attempts against the agent.