Agent skill · security · aradotso
cairn-ai-pentest
AI-automated penetration testing and general problem-solving system that achieved unique AK (All Killed) in Tencent Cloud Hackathon intelligent penetration challenge
Why this skill is useful
Adds executable scripts for automated penetration testing that extend the AI's capabilities in security workflows.
What it needs
Requires python installed locally. Requires openai account access. About 6k tokens when loaded. Last updated 2026-07-09. 70 stars on the source repository.
What this skill does
Cairn AI Automated Penetration Testing System Skill by ara.so — Daily 2026 Skills collection. Cairn is an AI-driven automated penetration testing and general problem-solving framework developed by the Bytex@起零衍迹实验室 team. It achieved the unique "AK" (All Killed / full score) result in the 2nd TCH Tencent Cloud Hackathon Intelligent Penetration Challenge, placing 4th online. The system uses LLM-based agents to autonomously reason about, plan, and execute multi-step security testing tasks. --- What Cairn Does Autonomous AI Agent Loop: Iteratively reasons about a target, selects tools, executes commands, and interprets results Penetration Testing Automation: Web vulnerability discovery, exploitation, CTF-style challenge solving General Problem Solving: Extensible to non-security tasks via tool/plugin architecture Multi-step Planning: Breaks complex objectives into subtasks with memory and context management Tool Integration: Wraps common pentest tools (nmap, sqlmap, curl, custom scripts) as callable agent actions --- Project Status ⚠️ Code is still being organized and is expected to be open-sourced soon. The examples below reflect the architecture described in the competition writeup and visible repository structure. Follow the writeup for architecture details: https://mp.weixin.qq.com/s/DlpEH7bVr0xi0VawPJs3XA --- Installation Environment Configuration Create a .env file in the project root: --- Core Architecture Cairn follows a ReAct (Reasoning + Acting) agent pattern: --- Key Usage Patterns 1. Basic Agent Invocation (Expected CLI) 2. Python API Usage (Expected) 3. Custom Tool Registration 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/cairn-ai-pentest