vt — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vt (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
vt is a Go CLI tool that creates intentionally vulnerable environments for security professionals, researchers, and educators using Docker Compose.
CAUTION: vt creates intentionally vulnerable environments - always run in isolated networks (VMs/sandboxes) and never expose to the internet.
go install github.com/happyhackingspace/vt/cmd/vt@latestgit clone https://github.com/HappyHackingSpace/vt.git
cd vt
go build -o vt cmd/vt/main.go
mv vt /usr/local/bin/| Command | Description |
|---|---|
vt template --list | List all available templates |
vt template --list --filter <tag> | Filter templates by tag (sqli, xss, ssrf, etc.) |
vt template --update | Update templates from remote repository |
vt start --id <template-id> | Start a vulnerable environment |
vt start --tags <tag1,tag2> | Start all templates matching tags |
vt ps | List running environments |
vt stop --id <template-id> | Stop an environment |
vt stop --tags <tag1,tag2> | Stop all templates matching tags |
vt -v debug <command> | Run with debug verbosity |
| Template | Type | Description |
|---|---|---|
vt-dvwa | Lab | Damn Vulnerable Web Application |
vt-juice-shop | Lab | OWASP Juice Shop |
vt-webgoat | Lab | OWASP WebGoat |
vt-bwapp | Lab | Buggy Web Application |
vt-mutillidae-ii | Lab | OWASP Mutillidae II |
More templates at vt-templates.
# List templates with SQL injection vulnerabilities
vt template --list --filter sqli
# Start DVWA
vt start --id vt-dvwa
# Start all XSS-related labs
vt start --tags xss
# Check running environments
vt ps
# Stop a specific environment
vt stop --id vt-dvwa| Use Case | Template |
|---|---|
| Practice SQL Injection | vt-dvwa |
| Learn XSS Exploitation | vt-dvwa |
| Test OWASP Top 10 | vt-juice-shop |
| Exploit Real CVEs | vt-2025-29927 |
| API Security Testing | vt-webgoat |
| Train Security Teams | vt-mutillidae-ii |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.