Cairn Ai Pentest

This is an LLM-powered pentesting agent that won 4th place and achieved a unique "AK" (all challenges solved) at Tencent's Cloud Hackathon intelligent penetration challenge. It's built on a ReAct loop where the AI reasons about targets, selects tools like nmap and sqlmap, executes them, and interprets results to chain together multi-step exploits. The repo shows it's still being organized and not fully open-sourced yet, but the architecture is documented in their competition writeup. If you're exploring autonomous security testing or CTF automation, this is an interesting reference implementation from a team that clearly knows what they're doing. Just be aware the codebase is in flux.

skills.sh installs: 265
GitHub stars: 26
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add aradotso/trending-skills --skill cairn-ai-pentest --agent claude-code

Installs into .claude/skills of the current project.

Files

Cairn AI Automated Penetration Testing System

Skill by ara.so — Daily 2026 Skills collection.

Cairn is an AI-driven automated penetration testing and general problem-solving framework developed by the Bytex@起零衍迹实验室 team. It achieved the unique "AK" (All Killed / full score) result in the 2nd TCH Tencent Cloud Hackathon Intelligent Penetration Challenge, placing 4th online. The system uses LLM-based agents to autonomously reason about, plan, and execute multi-step security testing tasks.

What Cairn Does

Autonomous AI Agent Loop: Iteratively reasons about a target, selects tools, executes commands, and interprets results
Penetration Testing Automation: Web vulnerability discovery, exploitation, CTF-style challenge solving
General Problem Solving: Extensible to non-security tasks via tool/plugin architecture
Multi-step Planning: Breaks complex objectives into subtasks with memory and context management
Tool Integration: Wraps common pentest tools (nmap, sqlmap, curl, custom scripts) as callable agent actions