Zen Ai Pentest Framework
This is a full-stack autonomous penetration testing framework that orchestrates 72+ real security tools like Nmap, Nuclei, and SQLMap through AI agents using the ReAct pattern. It's not simulating scans, it's running actual tools in Docker sandboxes with four safety levels and built-in controls to prevent you from accidentally hammering private IPs or production systems. The setup is straightforward with Docker Compose, and you get a FastAPI backend with WebSocket updates, PostgreSQL persistence, and professional compliance reporting. If you're doing regular security assessments or want to integrate automated pentesting into CI/CD pipelines, this gives you the orchestration layer without building it yourself. The safety controls and VPN requirements for level 3 exploits show someone actually thought about the liability issues.
- skills.sh installs
- 676
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill zen-ai-pentest-framework --agent claude-codeInstalls into .claude/skills of the current project.
Files
Zen AI Pentest Framework
Skill by ara.so — Security Skills collection.
Overview
Zen-AI-Pentest is a production-ready, AI-powered autonomous penetration testing framework that orchestrates 72+ real security tools through an intelligent multi-agent system. It executes actual tools (Nmap, Nuclei, SQLMap, FFuF, etc.) with safety controls, not mocks or simulations.
Key capabilities:
- Autonomous AI agents using ReAct pattern (Reason → Act → Observe → Reflect)
- Real tool execution in Docker sandbox with 4-level safety controls
- Risk engine with false positive reduction and CVSS/EPSS scoring
- FastAPI backend with WebSocket real-time updates
- PostgreSQL persistence and Redis caching
- JWT authentication with RBAC
- Professional PDF/HTML reporting with compliance mapping
- CI/CD integration (GitHub Actions, GitLab CI, Jenkins)
Installation
Prerequisites
- Python 3.10+
- Docker and Docker Compose
- PostgreSQL 13+ (or use Docker Compose)
- Redis (optional, for caching)
Quick Start with Docker Compose
# Clone repository
git clone https://github.com/SHAdd0WTAka/Zen-Ai-Pentest.git
cd Zen-Ai-Pentest
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aradotso/security-skills
- Categories
- Security, AI & Agent Building
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Edgesecurityaccess Wireguard Vpn670
- Sparkfinderoven Security Compliance Skills661
- Securityclaw Autonomous Soc Agent659
- Security Compliance Skills Suite Claude652
- Pentestify Security Report Generator639
- Awesome Claude Code Security Compliance Suite633
- Sparkfinderoven R01 Security Compliance Skills630
- Sparkfinderoven Claude Security Compliance Suite625
- S800 Vehicle Network Security Testing623
- Sparkfinderoven Security Compliance Suite622
- Esaa Security Audit617
- Foundry Security Spec586
- Anthropic Cybersecurity Skills1.3K
- Pentest Ai Agents1.1K
- Pentest Agents Bug Bounty Framework1K
- Openosint Ai Osint Framework992
- Vibe Security Skill976
- Openclaw Security Hardening971
- Malware Detection Awareness960
- Slowmist Agent Security Framework955
- Autopentestx Automated Pentesting950
- Avast Premium Security Analysis947
- Malware Warning Avast Keygen945
- Palisade Security Nexus Bitdefender937
Recommended
More Security
k8s-security-policieswshobson/agentsImplement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters15.1Kskills.sh installs
security-reviewaffaan-m/eccUse this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provid7.6Kskills.sh installsspringboot-securityaffaan-m/eccSpring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.6Kskills.sh installs
cosmos-vulnerability-scannertrailofbits/skillsScans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC +5.7Kskills.sh installsllm-trading-agent-securityaffaan-m/eccSecurity patterns for autonomous trading agents with wallet or transaction authority. Covers prompt injection, spend limits, pre-send simulation, circuit breake5.6Kskills.sh installs
authenticationdpearson2699/swift-ios-skillsImplement iOS authentication flows with AuthenticationServices and LocalAuthentication. Use when building Sign in with Apple, passkey/WebAuthn registration or s4.1Kskills.sh installs