---
title: "POST /ListPentestJobTasks"
method: POST
path: "/ListPentestJobTasks"
---

# POST /ListPentestJobTasks

`POST /ListPentestJobTasks`

Returns a paginated list of task summaries for the specified pentest job, optionally filtered by step name or category.

## Request body

- object
  - `agentSpaceId` string, required — The unique identifier of the agent space.
  - `maxResults` integer — Maximum results for pagination.
  - `pentestJobId` string — The unique identifier of the pentest job to list tasks for.
  - `stepName` 'PREFLIGHT' | 'STATIC_ANALYSIS' | 'PENTEST' | 'FINALIZING' | 'VALIDATION' — Pentest job step names.
  - `categoryName` string — Filter tasks by category name.
  - `nextToken` string — Pagination token.

## Response `200`

Success

- ListPentestJobTasksOutput — Output for the ListPentestJobTasks operation.
  - `taskSummaries` TaskSummary[] — The list of task summaries.
    - `taskId` string, required — The unique identifier of the task.
    - `pentestId` string — The unique identifier of the pentest associated with the task.
    - `pentestJobId` string — The unique identifier of the pentest job that contains the task.
    - `agentSpaceId` string — The unique identifier of the agent space.
    - `title` string — The title of the task.
    - `riskType` 'CROSS_SITE_SCRIPTING' | 'DEFAULT_CREDENTIALS' | 'INSECURE_DIRECT_OBJECT_REFERENCE' | 'PRIVILEGE_ESCALATION' | 'SERVER_SIDE_TEMPLATE_INJECTION' | 'COMMAND_INJECTION' | 'CODE_INJECTION' | 'SQL_INJECTION' | 'ARBITRARY_FILE_UPLOAD' | 'INSECURE_DESERIALIZATION' | 'LOCAL_FILE_INCLUSION' | 'INFORMATION_DISCLOSURE' | 'PATH_TRAVERSAL' | 'SERVER_SIDE_REQUEST_FORGERY' | 'JSON_WEB_TOKEN_VULNERABILITIES' | 'XML_EXTERNAL_ENTITY' | 'FILE_DELETION' | 'OTHER' | 'GRAPHQL_VULNERABILITIES' | 'BUSINESS_LOGIC_VULNERABILITIES' | 'CRYPTOGRAPHIC_VULNERABILITIES' | 'DENIAL_OF_SERVICE' | 'FILE_ACCESS' | 'FILE_CREATION' | 'DATABASE_MODIFICATION' | 'DATABASE_ACCESS' | 'OUTBOUND_SERVICE_REQUEST' | 'UNKNOWN' — The type of security risk the task is testing for.
    - `executionStatus` 'IN_PROGRESS' | 'ABORTED' | 'COMPLETED' | 'INTERNAL_ERROR' | 'FAILED' — The current execution status of the task.
    - `createdAt` string, date-time — The date and time the task was created, in UTC format.
    - `updatedAt` string, date-time — The date and time the task was last updated, in UTC format.
  - `nextToken` string — A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

---

[API](https://skmtc.net/aws/apis/securityagent.md) · [All operations](https://skmtc.net/aws/apis/securityagent/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityagent/versions/cad56717d636/schema)