Claude MarketplacesSubmit

Shannon Ai Pentester

aradotso/trending-skills

Shannon runs live pentests against your web app by reading your source code to find attack surfaces, then actually executing exploits like SQLi, XSS, SSRF, and auth bypasses against the running application. It only reports vulnerabilities it can reproduce with working proof-of-concept code. The whole thing runs in Docker containers and spins up parallel agents that test different vulnerability classes simultaneously. You point it at a URL and repo path, and it generates a report with copy-paste curl commands for every confirmed finding. Good for CI pipelines or pre-deployment audits when you want more than static analysis but don't have time for manual testing. Supports resumable workspaces and handles 2FA automatically if you pass TOTP secrets.

skills.sh installs: 1.6K
GitHub stars: 61
last updated: Jul 14, 2026

Install

$ npx -y skills add aradotso/trending-skills --skill shannon-ai-pentester --agent claude-code

Installs into .claude/skills of the current project.

Files

Shannon AI Pentester

Skill by ara.so — Daily 2026 Skills collection.

Shannon is an autonomous, white-box AI pentester for web applications and APIs. It reads your source code to identify attack vectors, then executes real exploits (SQLi, XSS, SSRF, auth bypass, authorization flaws) against a live running application — only reporting vulnerabilities with a working proof-of-concept.

How It Works

Reconnaissance — Nmap, Subfinder, WhatWeb, and Schemathesis scan the target
Code Analysis — Shannon reads your repository to map attack surfaces
Parallel Exploitation — Concurrent agents attempt live exploits across all vulnerability categories
Report Generation — Only confirmed, reproducible findings with copy-paste PoCs are included

Installation & Prerequisites

Docker (required — Shannon runs entirely in containers)
An Anthropic API key, Claude Code OAuth token, AWS Bedrock credentials, or Google Vertex AI credentials

git clone https://github.com/KeygraphHQ/shannon.git
cd shannon

Quick Start

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthly Promote your product hereReach 125k+ visitors monthly

Agent CaffeineSponsoredClose your lid, come back to finished work

SnugSponsoredThe clipboard manager for the AI era Promote your product hereReach 125k+ visitors monthly

WaxSponsoredBlock anything with supervision, without erasing your iPhone Promote your product hereReach 125k+ visitors monthly

knobsSponsoredSee your site on any phone, any day, in any language

Details

Repository: github.com/aradotso/trending-skills
Category: AI & Agent Building
First seen: Apr 16, 2026

Recommended

More AI & Agent Building

1

agent-ciredwoodjs/agent-ciRun GitHub Actions CI locally with Agent CI to validate changes before pushing. Use when testing, running checks, or validating code changes.1.6Kskills.sh installs

2

agent-integrationveris-ai/veris-skillsIntegrate a raw customer agent repo with Veris end to end. Installs or verifies veris-cli, logs in, creates or reuses a Veris environment, analyzes the repo, ge1.6Kskills.sh installs

3

radon-mcpsoftware-mansion-labs/skillsBest practices for using Radon IDE's MCP tools when developing, debugging, and inspecting React Native and Expo apps. Use when interacting with a running app th1.5Kskills.sh installs

4

axiom-xcode-mcpcharleswiltgen/axiomUse when connecting to Xcode via MCP, using xcrun mcpbridge, or working with ANY Xcode MCP tool (XcodeRead, BuildProject, RunTests, RenderPreview). Covers setup1.5Kskills.sh installs

5

ito-data-atlas-agentaffaan-m/eccDesign background Data Atlas style agents for Itô basket research, market discovery, parameter drafting, and human-in-the-loop editing. Use for architecture and1.5Kskills.sh installs

6

agent-kanbansaltbo/agent-kanbanCLI reference for agents — how to claim tasks, log progress, submit for review1.5Kskills.sh installs