Skip to main content
affpapa.org
RU EN
skill CX Codex

kali-pentest-ai-agent — Claude Code skill: install

This skill plans and runs phased penetration tests with Kali Linux tools. It fits authorized assessments where high-risk actions need human approval.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add reason-machines/security-skills --skill kali-pentest-ai-agent -a claude-code
Open on GitHub

What kali-pentest-ai-agent does

kali-pentest-ai-agent guides an agent through reconnaissance, scanning, vulnerability checks, exploitation, and post-exploitation. It selects Kali utilities from the test context, carries findings between phases, and adjusts the next steps as results arrive. The package describes 269 CLI tools, scenario playbooks for different assessment types, and Quick, Standard, and Deep modes.

The workflow checks authorization and scope, then pauses for approval before high-risk actions. Results can be turned into Markdown or HTML reports containing evidence and remediation guidance. Kali can run on the local machine, through SSH, or in Docker; remote access needs an SSH key, while the container mode needs Docker. Without an accessible Kali environment, the agent cannot run the assessment.

What it helps with

  • plan a phased penetration test
  • scan a network for exposed services
  • connect reconnaissance findings to later checks
  • assess a web application for vulnerabilities
  • produce a report with evidence and remediation

Example prompts for the agent

  • Run /kali-pentest for an authorized quick scan of 10.0.0.0/24 using the local Kali environment.
  • Use Docker mode to assess http://192.168.1.50; the kali-pentest container is ready and authorization is confirmed.
  • Perform a deep assessment of 192.168.1.50 through Kali over SSH, starting with port discovery and ending with a report.

How to install kali-pentest-ai-agent

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill kali-pentest-ai-agent -a claude-code

2Manually: put the files in place

~/.claude/skills/kali-pentest-ai-agent/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/kali-pentest-ai-agent/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about kali-pentest-ai-agent

How do I install kali-pentest-ai-agent in Claude Code?

Run npx skills add reason-machines/security-skills --skill kali-pentest-ai-agent -a claude-code, then check ~/.claude/skills/kali-pentest-ai-agent/SKILL.md.

What does kali-pentest-ai-agent do?

The skill plans penetration-testing phases, chooses Kali tools, carries findings across the workflow, and asks for approval before high-risk actions. It can also create reports with evidence and remediation guidance.

Which environment does the skill need?

It can use Kali Linux locally, through SSH, or inside Docker. SSH mode uses a key, and Docker mode requires a prepared container with Kali tools.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set42

malware-detection-and-removal A skill for spotting repositories that pose as cracked software and deciding what to do about them. CX Codex +1 952installs npm-security-best-practices Guides npm dependency hardening, supply-chain attack prevention, and safer package-manager settings. Useful when reviewing Node.js installs. CX Codex +1 919installs malware-detection-and-reporting This skill flags repositories that disguise malware as legitimate security software and helps assemble evidence for a report. CX Codex +1 851installs malware-repository-warning The skill triggers when someone asks for help with a crack, keygen or pre-activated antivirus, and answers with a warning instead of setup steps. CX Codex +1 851installs malware-analysis-warning This skill flags repositories that may distribute malware while posing as antivirus or other security software. CX Codex +1 833installs edgesecurityaccess-wireguard-vpn This skill walks the agent through standing up a WireGuard VPN: build the Go server, add users, and hand out configs over an HTTP API. CX Codex +1 788installs zen-ai-pentest-framework A skill that sets up an autonomous pentest framework for AI agents, running real security tools and producing compliance-mapped reports. CX Codex +1 779installs sparkfinderoven-security-compliance-skills A suite of commands and workflows for security and compliance work: OWASP scanning, CVE detection, GDPR audits, SOC 2 readiness, threat modeling. CX Codex +1 759installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor