pentest-ai-agents plugin
A pack of about fifty Claude Code subagents for authorized pentesting: planning, recon, exploit research and chaining, post-exploitation, detection and reportin
- 2,439 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Offensive agents deal with exploits, payloads and post-exploitation against real targets
- Shell-capable agents run security tools and network commands on hosts
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add plugins/pentest-ai-agentsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Offensive agents deal with exploits, payloads and post-exploitation against real targets
- Shell-capable agents run security tools and network commands on hosts
This is third-party code. Review the repository files before installing.
What it does
The plugin adds a large set of specialized subagents to Claude Code, each with its own domain: engagement planning and threat modeling, OSINT and recon, web and API, Active Directory, cloud, mobile and wireless, payload crafting, reverse engineering, exploit chaining, post-exploitation, detection engineering, forensics and report generation. You describe a task in plain text and Claude routes it to the right specialist. Shell-capable agents carry a mandatory scope-check block, and a shared scope guard hard-refuses denial of service, mass scanning, unattended worms and safety-of-life systems. It also ships a local SQLite findings database, a token-saving mode and an optional path to run tools inside a container.
Who it is for. For pentesters, red team operators and security researchers working in Claude Code on authorized engagements.
Good fit when
- You need to plan an authorized pentest and break it into stages
- You need to analyze recon data and research and validate exploits for a target
- You need to collect findings into a database and assemble a report
Not a fit when
- You have no written authorization to test the target
- You need a one-off security tip without installing a set of agents
Example request
Plan an external pentest of a small web application and break the work into stagesLimitations
Use only on authorized engagements; the user is responsible for the legality of use. The agents themselves are instructions for Claude Code, while the actual tools such as nmap, nuclei and ffuf must be installed separately, either via the --tools flag or checked with db/doctor.sh. The findings database and some features are available only through the script install; manual copy places only the agent files. A Claude Pro or Max subscription is required.
How to disable. If installed as a plugin, remove it via /plugin. If installed by script, run install.sh --uninstall, which removes the agents and commands. For a manual install, delete the agent files from ~/.claude/agents/ or the project's .claude/agents/.
FAQ
Is this legal?
The set targets authorized testing, in-scope bug bounty, CTF and education. A shared scope guard refuses destructive actions, and offensive agents require staying inside the agreed scope.
Do I need to install the security tools myself?
Yes. The agents provide methodology and analysis, while nmap, nuclei, ffuf and others are installed separately, via install.sh --tools or by hand. Use db/doctor.sh to audit which tools are present.
Discussion
No questions or reviews yet.
Related
PluginsA Claude Code plugin with 15 agents and 63 attack categories for authorized penetration testing with sign-off.
An authorized bug-bounty suite: 50 subagents, 26 commands and 2 bug-bounty-platform MCP servers for Claude Code, Codex and five more agents
A skill and command bundle for authorized bug bounty and external red-team work in Claude Code: methodology, chain templates and reports
A CLI agent for authorized pentesting: from a natural-language brief it runs recon, finds and verifies vulnerabilities and prepares a report
hackingtool plugin
hackingtool - Claude Code plugin
A Claude Code plugin wrapping 183 pentest and OSINT tools from Z4nzu/hackingtool, running them locally via Bash, WSL or Docker
A code security plugin: finds vulnerabilities, challenges its findings, proves exploitability and fixes with a verified patch
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| pentest-ai-agents (this card) | no | 2,439 | ||
| Caido Skills | yes | 289 | the official Caido skill for agents | |
| Pentest Agent Suite | no | key is optional | 1,080 | an authorized bug-bounty suite |
README in short
The README describes a set of Claude Code subagents that turn it into an offensive security assistant, split by domain: recon, web, Active Directory, cloud, post-exploitation, detection, forensics and reporting. It installs as a marketplace plugin, via the install.sh script or by copying files into the agents directory. Offensive agents carry a scope check and a shared scope guard hard-refuses destructive scenarios. It also adds a SQLite findings database, token savings, containerized tool runs and a cheaper-model mode for advisory agents. MIT licensed.