Skip to content
Get packs

Pentest Agent OS Index

Index for a penetration-testing skill suite that guides an agent through full-chain attack planning

Source Download skill
Repository
AIPentest/CyberStrikeAI
Stars
8,323
Licence
Apache-2.0
Files
1 file

What it does

This is the entry-point file for a suite of skills that teaches an AI agent to run authorized-style penetration tests as a search over possible attack paths rather than a fixed script. It tells the agent which other skills to load for each attack surface (reconnaissance, web, cloud, Active Directory, binaries, blockchain, AI apps, wireless, zero-day discovery and more) and sets standing rules for recording findings in a project knowledge base and verifying them before reporting. The file itself is only an index; the detailed techniques live in the other skills it names, which are not included in the files reviewed here.

Great for

  • Security professionals who already run penetration tests and want an agent to structure a full engagement
  • Red teams building an autonomous testing workflow who want a map of the skill suite
  • Developers evaluating how a multi-skill pentest agent is organised

Skip it if

  • Anyone without written authorisation to test the target, since the suite is built to attack systems and could cause harm or legal liability
  • Beginners looking for a safe learning tool, because the content assumes deep offensive-security knowledge and is not a guide to defence
  • Production systems that cannot tolerate scanning, exploitation attempts or data exposure

Try asking

  • “Start a full-chain pentest engagement against a web application I am authorised to test”
  • “Load the right sub-skill for a target where I have already identified a specific software component”
  • “Show me the skill map for the pentest suite and which skill covers cloud storage attacks”
Step-by-step guide: how to use Pentest Agent OS IndexInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    pentest-agent-os.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip pentest-agent-os.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip pentest-agent-os.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use this on systems you own or have explicit written permission to test, and keep the scope written down before starting.
  • Load pentest-agent-os first to understand the structure, then load only the sub-skills that match the attack surface you are working on.
  • Review what the agent actually executes and sends during the engagement, because the index itself says the workflow searches for online intelligence and tries alternative routes through proxies and tools.

What's inside

  • SKILL.md

Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.