Pentest Ai Agents
This is a comprehensive offensive security toolkit that turns Claude into a penetration testing assistant with 35 specialized subagents. It covers everything from Active Directory attacks and cloud security to reverse engineering and detection rule writing. The agents automatically route based on your task, understand 80+ security tools like BloodHound and Impacket, and enforce scope guards to prevent out-of-scope actions. Installation is straightforward with a curl script, and it includes a findings database for tracking vulnerabilities across engagements. The tier system is smart: advisory agents plan and analyze without executing, while execution-capable agents require explicit scope declaration before running tools. If you do pentesting work and want an AI assistant that actually knows the toolchain, this is worth trying.
- skills.sh installs
- 1.1K
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill pentest-ai-agents --agent claude-codeInstalls into .claude/skills of the current project.
Files
pentest-ai-agents
Skill by ara.so — Security Skills collection.
pentest-ai-agents transforms Claude Code into an offensive security research assistant through 35 specialized subagents. Each agent carries deep domain knowledge in specific areas: recon, web testing, Active Directory, cloud security, mobile/wireless pentesting, social engineering, payload crafting, reverse engineering, exploit chaining, detection engineering, and forensics.
The agents route automatically based on task description—no manual agent selection needed. They understand 80+ offensive security tools (nmap, nuclei, BloodHound, Impacket, Sliver, Ghidra, etc.) and can plan engagements, analyze recon data, research exploits, chain attacks, build detections, and write reports.
Installation
Quick Install (Recommended)
curl -fsSL https://raw.githubusercontent.com/0xSteph/pentest-ai-agents/main/install.sh | bash
This copies agent files to ~/.claude/agents/ and is idempotent (safe to re-run for updates).
Manual Clone and Install
git clone https://github.com/0xSteph/pentest-ai-agents.git
cd pentest-ai-agents
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aradotso/security-skills
- Categories
- Security, AI & Agent Building
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Pentest Agents Bug Bounty Framework1K
- Openosint Ai Osint Framework992
- Vibe Security Skill976
- Openclaw Security Hardening971
- Malware Detection Awareness960
- Slowmist Agent Security Framework955
- Autopentestx Automated Pentesting950
- Avast Premium Security Analysis947
- Malware Warning Avast Keygen945
- Palisade Security Nexus Bitdefender937
- Malware Warning Avast Piracy934
- Avast Security Awareness933
- Report Malicious Repository927
- Unisecurityguard Academic Whistleblower Archive925
- Wxmini Security Audit919
- Avast Premium Security Detection918
- Security Awareness Malicious Repository Detection909
- Avast Premium Security Malware Analysis905
- Avast Premium Security Awareness898
- Avast Security Analysis897
- Openclaw Security Watchdog856
- Security Threat Awareness852
- Malware Analysis DragonflyTomb Avast851
- Avast Premium Security Malware Detection837
Recommended
More Security
linux-hardeningbagelhole/devops-security-agent-skillsApply CIS benchmarks and secure Linux servers. Configure SSH, manage users, implement firewall rules, and enable security features. Use when hardening Linux sys832skills.sh installs
k8s-security-policieswshobson/agentsImplement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters15.1Kskills.sh installs
security-reviewaffaan-m/eccUse this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provid7.6Kskills.sh installsspringboot-securityaffaan-m/eccSpring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.6Kskills.sh installs
cosmos-vulnerability-scannertrailofbits/skillsScans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC +5.7Kskills.sh installs