aradotso avatar

Kali Pentest Ai Agent

This is an autonomous penetration testing agent that chains together Kali Linux tools across reconnaissance, scanning, exploitation, and post-exploitation phases. It intelligently selects from 269 tools based on what it finds, adjusts strategy mid-test like a human pentester would, and requires explicit approval before running anything destructive. Works in three modes: local Kali install, SSH to a remote Kali box, or a persistent Docker container. The real value is in the cross-phase integration,it can spot an unauthenticated Redis instance, exploit it for a shell, enumerate for credentials, then pivot laterally, all while building a structured report. You'll want proper authorization and a controlled environment. This isn't a passive scanner, it's an active attack agent with approval gates.

skills.sh installs
697
GitHub stars
6
last updated
Jul 14, 2026

Install

$ npx -y skills add aradotso/security-skills --skill kali-pentest-ai-agent --agent claude-code

Installs into .claude/skills of the current project.

Files

kali-pentest-ai-agent

Skill by ara.so — Security Skills collection.

An AI agent skill for autonomous penetration testing using Kali Linux. Provides 269 CLI security tools across 14 categories, 15+ scenario playbooks, intelligent attack path planning, cross-phase result integration, and mandatory human approval for high-risk actions. Unlike traditional automated scanners, this skill enables AI agents to adaptively plan, execute, and iterate through penetration testing phases like a human security researcher.

What It Does

Sponsors

Details

Repository
github.com/aradotso/security-skills
Categories
Security, AI & Agent Building
First seen
Jul 14, 2026

More from aradotso/security-skills

All 58

Recommended

More Security
1spatie avatarspatie-securityspatie/guidelines-skillsApply Spatie's security guidelines when configuring applications, databases, or servers, or when reviewing code for security concerns; use for SSL setup, CSRF p678skills.sh installs
2eyadkelleh avatarsecurity-fuzzingeyadkelleh/awesome-skills-securityEssential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.626skills.sh installs
3josiahsiegel avatardocker-security-guidejosiahsiegel/claude-plugin-marketplaceComprehensive Docker security guidelines and threat mitigation. PROACTIVELY activate for: (1) container security review, (2) running as non-root user, (3) read-619skills.sh installs
4bobmatnyc avatarwordpress-security-validationbobmatnyc/claude-mpm-skillsSecurity-first WordPress development with nonces, sanitization, validation, and escaping to prevent XSS, CSRF, and SQL injection vulnerabilities.618skills.sh installs
5aj-geddes avatarvulnerability-scanningaj-geddes/useful-ai-promptsAutomated vulnerability detection using OWASP tools, CVE databases, and security scanners. Use when performing security audits, compliance checks, or continuous617skills.sh installs
6aj-geddes avatarsecurity-testingaj-geddes/useful-ai-promptsIdentify security vulnerabilities through SAST, DAST, penetration testing, and dependency scanning. Use for security test, vulnerability scanning, OWASP, SQL in607skills.sh installs