Agent skill · security · aradotso
vibe-pentest-ai-security-testing
AI-powered automated penetration testing tool using multi-agent architecture for web applications, APIs, and admin panels
Why this skill is useful
Adds executable scripts for automated penetration testing and multi-agent orchestration that extend the AI's capabilities in security assessments.
What it needs
Requires git, python installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
vibe-pentest-ai-security-testing Skill by ara.so — Security Skills collection. Vibe Pentest is an AI Agent-based automated penetration testing tool that uses a multi-agent parallel execution architecture to perform comprehensive black-box penetration testing (including business logic vulnerability assessment) on web applications, APIs, and admin backends. It outputs stable and reliable security reports with actionable remediation recommendations. Overview Vibe Pentest orchestrates multiple AI agents to: Fingerprint web technologies and frameworks Crawl and map attack surfaces Execute parallel vulnerability testing across multiple categories Identify business logic flaws Generate comprehensive security reports in HTML and DOCX formats Version: v1.0.7 License: AGPL-3.0 Primary Language: Python Installation Prerequisites 1. Git (required for auto-update mechanism): 2. Python 3.10+ and dependencies: 3. Katana Crawler (included for Windows, download for other OS): Windows version included in tools/katana For other OS, see tools/katanadownloads.json for download links Automated Installation You can also ask your AI coding agent to install everything: Project Structure Core Testing Workflow Vibe Pentest follows a 7-phase workflow: Phase 0: Fingerprinting Identify web technologies, frameworks, and server information. Phase 0.5: Backend Entry Scanning Scan for admin panels and sensitive endpoints. Phase 1: Authorization Confirmation Verify written authorization before proceeding. Phase 2: Browser Login & Credential Extraction Launch browser for manual login, extract session cookies/tokens. Phase 3: Katana Crawling Use Katana crawler to discover all endpoints and parameters. Phase 4: Data Cleaning Process crawler output, deduplicate URLs, extract parameters. Phase 4.5: Attack Surface Mapping Map discovered endpoints to vulnerability test categories. Phase 5: Multi-Agent Parallel Testing Distribute testing across 6 specialized agents using prepared skeleton files. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/vibe-pentest-ai-security-testing