Agent skill · security · aiskillstore
pentest-coordinator
Autonomous penetration testing coordinator using ReAct methodology. Automatically activates when user provides a target IP or asks to start penetration testing. Orchestrates reconnaissance, exploitation, and privilege escalation until both user and root flags are captured. (project)
Why this skill is useful
Adds a complete automated penetration testing workflow with specific techniques and state management that the AI cannot generate on its own.
What it needs
Requires jq installed locally. About 11k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Pentest Coordinator Purpose When this skill is active, you become the central coordinator for automated penetration testing. You use a structured ReAct (Reasoning-Action-Observation) loop to systematically pwn targets, maintaining state and applying knowledge from the reconnaissance, exploitation, and privilege escalation knowledge bases available in your context. --- ⚠️ CRITICAL: MANDATORY CHECK BEFORE EVERY RESPONSE BEFORE generating ANY response (reasoning, action, or observation), you MUST execute this check: Based on the output: IF ANY flag shows "null": ❌ ABSOLUTELY FORBIDDEN in your response: "I'll summarize my progress" "Given the complexity and token usage" "I've tried many approaches" "Let me check current state and see what I might be missing" (without continuing) Any conclusion paragraph Any stopping statement Any meta-discussion about effort or difficulty ✅ ABSOLUTELY REQUIRED in your response: Identify next specific technique to try Execute that technique immediately NO summary, NO stopping, NO meta-discussion CONTINUE execution with concrete actions ONLY IF both flags show 32-character hexadecimal strings: ✅ You MAY output final summary ✅ Mission complete This check is NOT optional. This check is NOT a suggestion. You MUST perform this check and follow the rules above. --- Core Workflow 1. INITIALIZATION When activated, immediately: 1. Create or load state file: .pentest-state.json 2. If new target, initialize state structure 3. Set phase to reconnaissance State Structure: 2. REACT LOOP Execute this loop continuously until both flags are captured: A. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/pentest-coordinator