Agent skill · security · aradotso
h-pentest-ai-platform
AI-powered penetration testing platform with multi-agent architecture, 52+ attack knowledge base, and automated vulnerability scanning
Why this skill is useful
Adds executable scripts for automated vulnerability scanning and multi-agent orchestration that extend the AI's capabilities in penetration testing.
What it needs
Requires docker installed locally. Requires dashscope, openai account access. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
H-Pentest AI Platform Skill by ara.so — Security Skills collection. H-Pentest is an AI-driven penetration testing platform using multi-agent architecture with LLM (Large Language Model) orchestration. It features a Meta Supervisor, Strategic Supervisor, Worker Agent, Payload Master, and Report Supervisor working together to perform automated security testing. The platform includes 52+ attack knowledge documents, Docker sandbox execution, and real-time monitoring. Architecture Overview Multi-Agent System: Meta Supervisor: Generates insights every 3 rounds, decides when to stop testing, mode-aware (CTF vs RealWorld) Strategic Supervisor: Creates initial test plan, dynamically adjusts strategy each round Worker Agent: Executes tasks using ReAct framework (Reasoning → Action → Observation → Reflection) Payload Master: Provides testing guidance every 3 rounds, suggests payloads for identified vulnerabilities Report Supervisor: Analyzes conversation history, extracts vulnerabilities, generates attack paths Key Features: 52+ attack knowledge base (IDOR, SQL Injection, XSS, File Upload, SSRF, XXE, etc.) Docker sandbox for safe Python code execution Integrated tools: Nuclei scanner, directory scanner, Kali Linux tools RAG (Retrieval-Augmented Generation) knowledge retrieval Real-time WebSocket monitoring CTF and RealWorld testing modes Installation Docker Compose (Recommended) Local Development Backend: Frontend: Configuration Edit config.json in the root directory: Environment Variables: API Usage Create Penetration Test Task Monitor Task Progress (WebSocket) Query Attack Knowledge Base Get Task Status and Results Human Intervention Stop Task Generate Report Tool Integration Examples Execute Python Code in Sandbox The Worker Agent can execute Python code through the executepython tool: Run Nuclei Vulnerability Scan Directory Scanning Kali Linux Tools Execution Agent Prompting Patterns Worker Agent ReAct Loop The Worker Agent follows this pattern: Strategic Supervisor Planni …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/h-pentest-ai-platform