Agent skill · security · aradotso
hackingtool-plugin-claude
hackingtool-plugin-claude — an agent skill for coding agents.
Why this skill is useful
Adds a comprehensive plugin that integrates 183 pentesting and OSINT tools with executable scripts for automated vulnerability scanning and reconnaissance.
What it needs
Requires docker installed locally. About 5k tokens when loaded. Last updated 2026-07-09. 70 stars on the source repository.
What this skill does
bash /plugin marketplace add AKCODEZ/hackingtool-plugin /plugin install hackingtool@hackingtool-marketplace "recon example.com" "hunt the username johndoe across social platforms" "scan my repo for leaked secrets" "enumerate subdomains for target.com" python Backend priority: Docker > WSL > Native import htenv env = htenv.detect() Returns one of: "native", "wsl", "docker" env.run("nmap -sV 192.168.1.1") dispatches correctly python import subprocess, json result = subprocess.run( ["python3", "htrun.py", "nmap", "--", "-sV", "192.168.1.1"], captureoutput=True, text=True ) output = json.loads(result.stdout) output = {"tool": "nmap", "backend": "docker", "stdout": "...", "stderr": "...", "returncode": 0} bash Run a tool python3 htrun.py <toolid> [-- <toolargs...>] Install a tool natively (Linux/WSL) python3 htrun.py nmap --install List available tool IDs python3 htrun.py --list python import subprocess, json def ht(toolid, args): cmd = ["python3", "htrun.py", toolid, "--"] + list(args) r = subprocess.run(cmd, captureoutput=True, text=True) return json.loads(r.stdout) target = "example.com" 1. Passive subdomain enumeration subs = ht("subfinder", "-d", target, "-silent") print(subs["stdout"]) 2. HTTP probe live hosts httpx = ht("httpx", "-l", "-", "-silent") # pipe subfinder output 3. Port scan ports = ht("nmap", "-sV", "--open", "-T4", target) print(ports["stdout"]) 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/hackingtool-plugin-claude