hardw00tCommunity·11 Agent Skills Included

ai-security-arsenal

Automated penetration testing, code scanning, and cloud audits

Runs security assessments across code, APIs, mobile apps, cloud accounts, containers, and internal networks. Orchestrates scanners like Semgrep, Trivy, Nuclei, and BloodHound, then triages findings by real exploitability. Eliminates manual scanner setup, noisy false positives, and unstructured reports. Produces standardized findings ready for Jira, DefectDojo, or CI/CD gates.

90|14

↗

npx skills add hardw00t/ai-security-arsenal --all -g -y

All Skills in This Repository (11)

Pure Emerald Level Indicators

📦 In Repo

hardw00t

sast-orchestration

Orchestrate Semgrep, CodeQL, and Bandit scans across codebases.

network-pentest

Simulate attacker techniques across internal networks and Active Directory environments.

container-security

Automates container security assessments across Docker images, Kubernetes clusters, and runtimes using Trivy, Grype, Kubescape, kube-bench, and Falco.

iac-security

Scan Infrastructure as Code configurations for misconfigurations and policy violations.

cloud-security

Automate multi-cloud security assessments across AWS, Azure, and GCP.

threat-modeling

Identify threats using STRIDE, PASTA, Attack Trees, and DREAD.

android-pentest

Automate Android app pentesting with static APK analysis and Frida instrumentation.

api-security

Tests API security vulnerabilities across REST, GraphQL, gRPC, and WebSocket interfaces.

dast-automation

Automate dynamic application security testing across web apps using Playwright MCP.

ios-pentest

Automate iOS pentesting workflows with Frida and Objection.

sca-security

Scan dependencies for CVEs and audit licenses across software projects.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install AI Security Arsenal?▼

Run `npx skills add hardw00t/ai-security-arsenal --all -g -y` in your terminal to install all security skills globally.

What security testing does AI Security Arsenal cover?▼

It covers static code analysis, dependency scanning, web and API testing, Android and iOS pentesting, cloud and container audits, Active Directory attacks, LLM red-teaming, and threat modeling.

Can it reduce false positives from security scanners?▼

Yes. The SAST and SCA skills aggregate output from multiple scanners, deduplicate results, and rank findings by reachability and exploitability.

Does it work with Claude Code and other coding agents?▼

Yes. Every skill follows the standard SKILL.md format and runs in Claude Code, Codex, OpenCode, Cursor, and similar agents.

Is authorization required before running pentest skills?▼

Yes. Offensive skills like network-pentest and llm-security require written authorization and defined scope before any testing begins.