Skip to content
Get packs

Penetration Testing Toolchain

Lets an AI agent drive security scanners like Nmap, Nuclei and SQLMap against authorized targets via MCP.

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
15 files

What it does

This skill teaches an AI agent how to run a penetration-testing workflow: reconnaissance (port and subdomain scanning), vulnerability scanning, web testing such as SQL injection and directory brute-forcing, and password cracking. It maps common security tools to the commands to use and points the agent to an MCP server (such as pentestMCP or mcp-security-hub) that exposes those tools to the agent. It also requires the agent to check for written authorization (a scope file) before any scan and to log every step.

Great for

  • Security professionals running authorized assessments who want an agent to speed up scanning and note-taking
  • Developers who already run a Kali or Docker-based security lab and want a structured workflow for an AI agent
  • Bug bounty hunters working within a published program scope

Skip it if

  • Testing systems you do not own or have explicit written permission to test: the skill's active scanning and exploitation can be illegal and harmful without authorization
  • Beginners looking for a safe learning tool: it assumes working knowledge of the tools and requires installing heavy security software
  • Environments where scans could disrupt production: the skill itself warns that rate control is needed to avoid crashing targets or triggering IDS

Try asking

  • “Scan my authorized test server with Nmap and summarise the open services”
  • “Run Nuclei with critical and high severity templates against the staging host in my scope file”
  • “Enumerate subdomains for the target domain and check which hosts are alive with httpx”
  • “Draft a penetration test report from the findings recorded in the case timeline”
Step-by-step guide: how to use Penetration Testing ToolchainInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 15 original files, the MIT licence and an attribution note.

    pentest-tools.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip pentest-tools.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip pentest-tools.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Confirm a scope file with auth status granted before asking the agent to scan anything, and keep scans to the agreed targets
  • Start with low-rate, passive reconnaissance and move to active scanning only after reviewing the results
  • Review every command the agent proposes before it runs, since the skill references scripts and external tools that execute against real targets

What's inside

  • payloads/README.md
  • references/ai-pentest-agents.md
  • references/ai-pentesting-landscape-2026.md
  • references/automation-loop-pattern.md
  • references/awesome-pentest-digest.md
  • references/burpsuite-mcp-guide.md
  • references/client-side-lab-playbook.md
  • references/kali-mcp-ecosystem.md
  • references/msf-protocol.md
  • references/network-attack-defense.md
  • references/nuclei-guide-2026.md
  • references/pentest-ai-agents-matrix.md
  • references/pentest-loop.md
  • SKILL.md
  • src-hunter/SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.

Find exactly what
you're looking for