Agent skill · security · aradotso
pentest-ai-agents
Claude Code subagents for offensive security research, penetration testing planning, recon analysis, exploit research, detection engineering, and security reporting
Why this skill is useful
Adds 35 specialized subagents with deep domain knowledge and executable capabilities for offensive security tasks that the AI cannot generate on its own.
What it needs
Requires curl, git installed locally. About 10k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
pentest-ai-agents Skill by ara.so — Security Skills collection. pentest-ai-agents transforms Claude Code into an offensive security research assistant through 35 specialized subagents. Each agent carries deep domain knowledge in specific areas: recon, web testing, Active Directory, cloud security, mobile/wireless pentesting, social engineering, payload crafting, reverse engineering, exploit chaining, detection engineering, and forensics. The agents route automatically based on task description—no manual agent selection needed. They understand 80+ offensive security tools (nmap, nuclei, BloodHound, Impacket, Sliver, Ghidra, etc.) and can plan engagements, analyze recon data, research exploits, chain attacks, build detections, and write reports. Installation Quick Install (Recommended) This copies agent files to ~/.claude/agents/ and is idempotent (safe to re-run for updates). Manual Clone and Install The --tools flag installs underlying offensive security tools via apt/brew/pacman + pipx/go/cargo. Installation Modes Flag Behavior ------ ---------- --global Install to ~/.claude/agents/ (all projects) --project Install to .claude/agents/ (current project) --lite Use Haiku for Tier 1 advisory agents (cost optimization) --tools Install underlying tools (nmap, nuclei, BloodHound, etc.) Agent Architecture Tier 1 vs Tier 2 Tier 1 (Advisory): Analyze data, plan engagements, recommend commands. Never execute tools directly. Examples: engagement-planner, exploit-guide, detection-engineer. Tier 2 (Execution-capable): Can run tools with user approval and declared scope. Examples: recon-advisor, web-hunter, ad-attacker, payload-crafter. All Tier 2 agents enforce scope guards—they require explicit engagement scope declaration and refuse out-of-scope actions. Agent Categories Core Commands Interactive Routing Once installed, just describe your task in Claude Code: Claude routes to the appropriate specialist automatically. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/pentest-ai-agents