Agent skill
hackthebox
HackTheBox platform automation - login via Playwright, browse challenges/machines/labs, manage VPN connections, solve challenges using pentest skills, log all proceedings, and feed learnings back into skill improvement.
Install this agent skill to your Project
npx add-skill https://github.com/transilienceai/communitytools/tree/main/projects/pentest/.claude/skills/hackthebox
SKILL.md
HackTheBox
Execute this workflow directly — do NOT spawn a subagent. Playwright MCP tools (browser navigation, clicking, screenshots) are only available in the current session, not in subagents.
Read the agent definition and follow it step by step:
Read .claude/agents/hackthebox.md
Then execute the workflow from that file directly in this session — Phase 0 through Phase 6. You have access to all required tools: Playwright MCP (browser), Bash (including .claude/tools/env-reader.py and .claude/tools/slack-send.py), Agent (for spawning orchestrator), AskUserQuestion, Read, Write.
Key points:
- You ARE the hackthebox agent — execute its workflow directly
- Use Playwright MCP tools for all browser interaction (login, tab management, flag submission)
- Use
python3 .claude/tools/slack-send.pyfor Slack notifications — no agent spawn needed - Use
python3 .claude/tools/env-reader.pyfor credentials — no agent spawn needed - Spawn
Pentester Orchestratoras subagent via Agent tool - The user's request follows the
/hacktheboxcommand — pass it through
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
techstack-identification
OSINT-based technology stack identification. Discovers company tech stacks using passive reconnaissance across 17 intelligence domains. Given a company name (and optional domain hint), infers frontend, backend, infrastructure, and security technologies using publicly available signals.
conflict_resolver
web-archive-analysis
Uses Wayback Machine to detect technology migrations over time
evidence_formatter
signal_correlator
dns-intelligence
Extracts technology signals from DNS records (MX, TXT, NS, CNAME, SRV)
Didn't find tool you were looking for?