# Pentest helper skills by step

verified: 2026-11-03

Which helper skill runs at which step of the Procedure. Each helper keeps its own procedure; this skill gathers the output.

| Step                  | Helper skills                                                                                                                                                                                                                  |
| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| 1 collect-context     | `stride-threat-model` first, then `permission-boundary-review`, `business-logic-abuse-review`, `input-validation-review`, `auth-mechanism-review`, `cryptographic-review`, `logging-monitoring-review`, `rate-limiting-review` |
| 2 run-project-scripts | `dependency-advisory-triage`                                                                                                                                                                                                   |
| 3 live-validation     | `runtime-surface-probing`                                                                                                                                                                                                      |
| 4 synthesize-findings | `finding-normalizer`                                                                                                                                                                                                           |
| Retest mode           | `retest-verification`                                                                                                                                                                                                          |