DD pentest-tools

主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。通过 MCP server（pentestMCP / mcp-security-hub）将 20+ 安全工具暴露给 AI agent。触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。

coco-research/coco Agent Skills author: coco-research 16 files body ≈ 991 tokens Open the sourcegithub.com↗ analyzed 2 d ago

主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。通过 MCP server（pentestMCP / mcp-security-hub）将 20+ 安全工具暴露给 AI agent。…

As a process D 35/100 · Unfinished process — References files that are not bundled: references/client-side-lab-playbook.md

Procedure GitHub AI and agents Securitytype and topics are labelled automatically from the skill text

Runs in: Claude / Claude Code ChatGPT / Codex Gemini CLI Cursor GitHub Copilot / VS Code Qwen Code Kimi Code CLI Z.ai (GLM) DeepSeek (Deep Code) Mistral Vibe LangChain (deepagents) OpenClaw Goose OpenCode

JSON

Technical rating

65/100

safety, quality, tests

Safety 60%: 62
Quality 40%: 70
Run on models: none yet

Process rating

35/100

Unfinished process

References files that are not bundled: references/client-side-lab-playbook.md

Tools and files w 18: 0
Result and completion w 14: 0
Inputs and preconditions w 11: 0

the three weakest of ten parameters · all ten

How to improve

Say in the description WHEN to use the skill ("use when…", example requests): that is the agent's main cue.
The text references files that are not there: add them or drop the references.

For the model run — optional

Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.

Guard findings · 38

✓ No critical or high findings

Medium and low: 38

low Risky intent intent-offensive-security references/ai-pentest-agents.md:4

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
> 可作为本包 pentest-tools skill 的补充能力来源。
```
fixture
low Risky intent intent-offensive-security references/ai-pentest-agents.md:13

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
| **pentest-ai (0xSteph)** | MCP server + Python agents，197+ 安全工具，exploit 链接，PoC 验证 | https://github.com/0xSteph/pentest-ai |
```
fixture
low Risky intent intent-offensive-security references/ai-pentest-agents.md:18

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
| **Auto-Pentest-GPT** | LLM 驱动的软件渗透测试 | https://github.com/Armur-Ai/Auto-Pentest-GPT-AI |
```
fixture
low Risky intent intent-offensive-security references/ai-pentest-agents.md:23

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file; quoted — discussed, not commanded)
```
这些框架大多支持 MCP 或 HTTP API，可以作为本包 `pentest-tools` skill 的增强后端：
```
fixturequoted
low Risky intent intent-offensive-security references/ai-pentest-agents.md:28

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file; quoted — discussed, not commanded)
```
"pentest-ai": {
```
fixturequoted
low Risky intent intent-offensive-security references/ai-pentesting-landscape-2026.md:11

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
- 在 Bug Bounty 排行榜上已超越部分人类黑客
```
fixture
low Risky intent intent-offensive-security references/ai-pentesting-landscape-2026.md:19

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
| **Pentest Swarm AI** | Stigmergic blackboard | 执行 | pgvector + pheromones | 8 ProjectDiscovery + nmap | ✓ | ✓ 真 swarm |
```
fixture
low Risky intent intent-offensive-security references/ai-pentesting-landscape-2026.md:37

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
| XBOW | 自主 Bug Bounty | AI agent 自动挖洞提交 |
```
fixture
low Risky intent intent-offensive-security references/ai-pentesting-landscape-2026.md:52

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
上面列出的工具（特别是 Pentest Swarm AI、HexStrike AI、mcp-kali-server）都可以作为本包的**执行后端**，通过 MCP 接入。
```
fixture
low Risky intent intent-offensive-security references/ai-pentesting-landscape-2026.md:59

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
pentest-tools/SKILL.md
```
fixture
low Risky intent intent-offensive-security references/awesome-pentest-digest.md:3

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
> 精选自 [awesome-pentest](https://github.com/enaqx/awesome-pentest)（25k+ stars，CC-BY 4.0）
```
fixture
low Risky intent intent-offensive-security references/awesome-pentest-digest.md:173

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
| Pentest-Ground | https://pentest-ground.com/ |
```
fixture
low Risky intent intent-offensive-security references/burpsuite-mcp-guide.md:370

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (quoted — discussed, not commanded)
```
- `pentest-tools` Nmap 发现 Web 服务 → Burp MCP 做深度测试
```
quoted
low Risky intent intent-offensive-security references/kali-mcp-ecosystem.md:45

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
- **特点**：多 agent 架构，自动化渗透测试、漏洞发现、Bug Bounty
```
low Risky intent intent-offensive-security references/kali-mcp-ecosystem.md:49

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
### 4. Pentest Swarm AI
```
low Risky intent intent-offensive-security references/kali-mcp-ecosystem.md:51

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (quoted — discussed, not commanded)
```
- **安装**：`go install github.com/Armur-Ai/Pentest-Swarm-AI/cmd/pe…@….1.0`
```
quoted
low Risky intent intent-offensive-security references/kali-mcp-ecosystem.md:52

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
- **来源**：[Armur-Ai/Pentest-Swarm-AI](https://github.com/Armur-Ai/Pentest-Swarm-AI)
```
low Risky intent intent-offensive-security references/kali-mcp-ecosystem.md:64

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
### 6. Pentest-Agent
```
low Risky intent intent-offensive-security references/nuclei-guide-2026.md:4

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
> 适用场景：漏洞扫描、自定义检测模板编写、Bug Bounty 自动化
```
low Risky intent intent-offensive-security references/nuclei-guide-2026.md:116

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
### Pentest Swarm AI 集成
```
low Risky intent intent-offensive-security references/nuclei-guide-2026.md:118

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
Pentest Swarm AI 原生集成 Nuclei，在 swarm 模式下：
```
low Risky intent intent-offensive-security references/pentest-ai-agents-matrix.md:1

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
# pentest-ai-agents 覆盖矩阵
```
fixture
low Risky intent intent-offensive-security references/pentest-ai-agents-matrix.md:3

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
> 参考自 [0xSteph/pentest-ai-agents](https://github.com/0xSteph/pentest-ai-agents)（1.3k stars，MIT）
```
fixture
low Risky intent intent-offensive-security references/pentest-ai-agents-matrix.md:4

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
> 35 个 Claude Code 渗透子 agent 的能力映射。可作为我们 pentest-tools skill 的方法论参考。
```
fixture
low Dangerous commands cmd-pipe-to-shell-known-host references/pentest-ai-agents-matrix.md:11

Pipe-to-shell installer from a well-known host (still executes remote code) (test fixture / example file; documentation of a security skill)
```
curl -fsSL https://raw.githubusercontent.com/0xSteph/pentest-ai-agents/main/install.sh | bash
```
fixturesecurity skill
low Risky intent intent-offensive-security references/pentest-ai-agents-matrix.md:11

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
curl -fsSL https://raw.githubusercontent.com/0xSteph/pentest-ai-agents/main/install.sh | bash
```
fixture
low Risky intent intent-offensive-security references/pentest-ai-agents-matrix.md:24

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (test fixture / example file)
```
| engagement-planner | 渗透计划/ROE/ATT&CK 映射 | — | pentest-tools |
```
fixture
low Risky intent intent-offensive-security references/recon-pipeline.md:1

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
# 授权侦察流水线（Bug Bounty / 渗透）
```
low Risky intent intent-offensive-security references/recon-pipeline.md:3

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
> 来源启发：社区 bug bounty recon 管线（subfinder→httpx→katana→nuclei→ffuf 等）、claude-bug-bounty 类 /recon 流程
```
low Dangerous commands cmd-execpolicy-bypass references/recon-pipeline.md:19

Runs PowerShell with execution policy bypassed (documentation of a security skill)
```
powershell -NoProfile -ExecutionPolicy Bypass -File skills\scripts\case…ps1 `
```
security skill
low Risky intent intent-offensive-security references/recon-pipeline.md:20

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (quoted — discussed, not commanded)
```
-Hint "web pentest app.example" -CaseName "demo-case" `
```
quoted
low Dangerous commands cmd-execpolicy-bypass references/recon-pipeline.md:123

Runs PowerShell with execution policy bypassed (documentation of a security skill)
```
powershell -NoProfile -ExecutionPolicy Bypass -File skills\scripts\appe…ps1 `
```
security skill
low Risky intent intent-offensive-security references/recon-pipeline.md:143

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (quoted — discussed, not commanded)
```
深度漏洞类型 playbook → `pentest-tools/src-hunter/`。
```
quoted
low Risky intent intent-offensive-security SKILL.md:2

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
name: pentest-tools
```
low Risky intent intent-offensive-security SKILL.md:10

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
# 渗透测试工具链 (Pentest Tools)
```
low Risky intent intent-offensive-security SKILL.md:88

Offensive-security / dual-use content (legitimate for authorised testing; review intended use) (quoted — discussed, not commanded)
```
> **重要**：执行渗透测试时，必须按 `references/pentest-loop.md` 的自主循环框架运行。
```
quoted
low Risky intent intent-offensive-security SKILL.md:138

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
- [awesome-pentest](https://github.com/enaqx/awesome-pentest) — 25k+ stars 渗透工具大全
```
low Risky intent intent-offensive-security SKILL.md:142

Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
```
- [pentest-ai-agents](https://github.com/0xSteph/pentest-ai-agents) — 35 个 Claude Code 渗透子 agent（参考其 prompt 模式）
```

Files scanned: 16. Evidence is masked. Grey chips explain why severity was lowered.

Against the Agent Skills spec

warning description-no-when description does not say WHEN to use the skill (no "use when")
warning missing-ref reference to a missing file: references/client-side-lab-playbook.md

Process rating: all ten parameters 35/100

Will not run. References files that are not bundled: references/client-side-lab-playbook.md

0Tools and files. 1 referenced file(s) missing: references/client-side-lab-playbook.md
0Result and completion. Does not say what the result is
0Inputs and preconditions. Does not say what the process needs to start
0Failures and branches. Linear process with no failure handling
0Progress reporting. Says nothing while it works
20When it triggers. No condition that starts the skill
100Steps. 30 steps
100Consistency. Name and required fields are in place
100Execution cost. Instruction body is 991 tokens
100Running it twice. No mutating operations

Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.

Quality signals

+5Description has no quoted example phrases that should trigger the skill
+4Description does not say when NOT to use the skill (false activations)
+3Output format is not stated: the model decides each time
+1No license
+2Single-language instructions
+3Description length 218: enough signal without eating the budget
+4Structure: 15 headings
+3Step-by-step instructions: 30 items
+4Has examples (2 code blocks)
+4Reference files are cited in the instructions (6 of 10)

Quality base 70; lint remarks subtract, signals add up to 100. Result: 70.

Tests

— no evals.json

— no spec.yaml

— not run on models

Files · 16

SKILL.md 6K
references/ai-pentest-agents.md 6K
references/ai-pentesting-landscape-2026.md 3K
references/automation-loop-pattern.md 5K
references/awesome-pentest-digest.md 6K
references/burpsuite-mcp-guide.md 23K
references/kali-mcp-ecosystem.md 4K
references/nuclei-guide-2026.md 4K
references/pentest-ai-agents-matrix.md 5K
references/pentest-loop.md 7K
references/recon-pipeline.md 6K
templates/findings.md 0K
templates/progress.md 0K
templates/rules.md 1K
templates/scope.md 0K
templates/task_plan.md 1K

Frontmatter

user-invocable: true

Dates

In catalog since —

Updated in catalog —

First seen here 3 Nov 2026

Last analysis 3 Nov 2026, 22:00 UTC

Last seen in crawl 7 h ago

Score history

Date		Score	Safety	Qual.
3 Nov 2026	D	65	62	70

For the author: a README badge

html

The badge shows today's grade: if the skill changes, so does it. More.

Similar skills

D pentest-tools sickn33/agentic-awesome-skills
D pentest-tools sickn33/agentic-awesome-skills
D pentest-tools sickn33/agentic-awesome-skills
D pentest-tools zhaoxuya520/reverse-skill