pentest-ai-agents

0xSteph/pentest-ai-agents

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Shell MIT

View on GitHub → Find it in the atlas

Install

curl -fsSL https://raw.githubusercontent.com/0xSteph/pentest-ai-agents/main/install.sh | bash

Repository reader

Explore before you clone

Read the project’s README, skills and supporting Markdown here. Rendered view is shown first; source is one click away when you need the exact text.

Fetched from GitHub
Open on GitHub
Loading the project’s README…

Public files are loaded on demand from the repository. The atlas does not copy or modify them.

Screenshot

Screenshot or social card for pentest-ai-agents
GitHub's social card — no screenshot was found for this project, fetched from source rather than copied into this repository.

Platform support

Derived from the project's own README, install route, CI configuration and release assets — not from running it.
PlatformRuns hereOn what evidence
WindowsLikelyInferred from the language or runtime. Nothing in the project says so.
WSL2YesStated in the project's own README, install route, CI config or release assets.
macOSYesStated in the project's own README, install route, CI config or release assets.
LinuxYesStated in the project's own README, install route, CI config or release assets.
DockerYesStated in the project's own README, install route, CI config or release assets.

Where it came from

No curated list names this project yet: the atlas found it through its own GitHub search, which adds fast-rising agentic repositories before a list catches up.

How it is classified

One topic, 2 harnesses. Each link is a prerendered page of everything else in that slice.

Sandbox, Security & GovernanceClaude CodeClaude / Anthropic

Related in Sandbox, Security & Governance

Closest first — projects that plug into the same harnesses, then the ones the most lists agreed on.

  • Brood Boxstacklok/brood-boxRun AI coding agents (Claude Code, Codex, OpenCode) inside hardware-isolated microVMs with snapshot isolation, egress control, and MCP authorization
  • Node9node9-ai/node9-proxySecurity and governance layer that checks every tool call from coding agents and MCP servers before it runs: credential jail, secret and PII…
  • Open AgentTh0rgal/orbSelf-hosted control plane for Claude Code with isolated container workspaces and real-time mission streaming
  • SkilLockskills-lock/skil-lockBehavior-pinning lockfile + capability-delta PR review for Claude Code & Codex skills; SARIF output for Code Scanning
  • Agent GuardJeongJaeSoon/agent-guardby JeongJaeSoon - Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI
  • Agent VaultInfisical/agent-vaultInfisical's open-source credential broker that sits between AI agents and the APIs they call, injecting real credentials onto outbound requests so…
  • agent-audit-kitsattyamjjain/agent-audit-kitOffline static scanner for MCP and agent configurations with SARIF output, a GitHub Action, and a public ledger mapping each covered MCP CVE to the…
  • agent-diff-guardcubxxw/agent-diff-guardPre-push guardrail that flags high-risk coding-agent diffs such as CI/CD changes, dependency edits, test deletions, hardcoded secrets, and…