Agent skill · security · aradotso
pentestcompanion-workspace
Self-hosted pentest management workspace for tracking engagements, running tools, auto-importing findings, and generating reports
Why this skill is useful
Provides integration patterns and specific commands for managing pentest engagements that the AI wouldn't reliably generate on its own.
What it needs
Requires docker, python installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Pentest Companion Workspace Skill by ara.so — Security Skills collection. Pentest Companion is a self-hosted workspace for managing penetration testing engagements. It consolidates target tracking, tool execution, finding management, CVSS scoring, evidence collection, client portals, and report generation into a single interface. All data stays on your infrastructure—no cloud dependencies. What It Does Engagement Management: Track targets, open ports, credentials, attack paths, PTES checklist phases, and time spent Finding Management: CVSS v3.1 scoring, CVE lookup, evidence uploads, 2400+ templates, bulk operations Tools Hub: 90+ integrated tools (nmap, gobuster, nikto, sqlmap, netexec, impacket suite, etc.) with live output streaming and auto-import Web Scanner: Passive security scanner for TLS, headers, cookies, CORS, exposed files, tech fingerprinting Reporting: DOCX/PDF generation with branded cover pages, executive summaries, and technical findings Workflow Playbooks: Sequential multi-tool scan pipelines (External Recon, Web App, AD/SMB Enum, etc.) Terminal Logging: Pipe command output from your terminal into engagement sessions with ANSI replay Scheduled Scans: Recurring tool runs against targets with auto-import Webhooks: Slack/Discord/Teams notifications on finding creation REST API: Read-only endpoints for engagements and findings Installation Docker (Recommended) Access at http://localhost:5000. Default admin credentials are printed on first run. Python Configuration .env file controls all configuration: Core Workflows Creating an Engagement Via UI: Engagements → New Engagement → fill form → optionally enable Auto-Scan to run tools on target creation. Adding Targets UI: Engagement page → Targets → Add Target Running Tools From UI: 1. Navigate to Tools Hub 2. Select tool (e.g., nmap-quick) 3. Choose engagement and target 4. Click Run Tool 5. Watch live output stream 6. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/pentestcompanion-workspace