guardian-cli-ai-pentest

Automates penetration testing workflows using LLM providers and security tools like nuclei, nmap, and sqlmap.

4|Updated May 16, 2026
One-click install
npx skills add https://github.com/reason-machines/devtools-skills --skill guardian-cli-ai-pentest-reason-machines
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: guardian-cli-ai-pentest
Source: https://github.com/reason-machines/devtools-skills/tree/main/skills/guardian-cli-ai-pentest
Command: npx skills add https://github.com/reason-machines/devtools-skills --skill guardian-cli-ai-pentest-reason-machines

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manual penetration testing requires coordinating dozens of security tools, interpreting their output, and writing reports, which is slow and error-prone. Guardian orchestrates 19+ security tools with AI providers (GPT-4, Claude, Gemini, OpenRouter) to plan, execute, and document security assessments automatically. ## Core Features & Use Cases - AI-Driven Workflows: Run predefined workflows (web_pentest, network, recon, autonomous) where an LLM selects tools, adapts to findings, and reasons about next steps. - Custom Workflows and Tools: Define YAML-based workflows with per-step AI instructions and register custom Python tool classes for specialized scanners. - Report Generation: Produce markdown, HTML, or JSON pentest reports from session data with evidence capture and severity filtering. - Use Case: A security engineer runs python -m cli.main workflow run --name web_pentest --target example.com --provider claude to execute HTTP discovery, vulnerability scanning, SQL injection and XSS testing, then generates an HTML report of all findings. ## Quick Start Set your AI provider API key as an environment variable, then ask the agent to run the Guardian web_pentest workflow against your authorized target and generate a markdown report of the findings.

Frequently Asked Questions about guardian-cli-ai-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an AI-powered penetration test with Guardian?▼

Run a penetration test with `python -m cli.main workflow run --name web_pentest --target example.com --provider openai`. Guardian coordinates tools like httpx, nuclei, and sqlmap while the AI plans steps and interprets findings.

Which AI providers does Guardian support for pentesting?▼

Guardian supports OpenAI GPT-4, Anthropic Claude, Google Gemini, and OpenRouter, configured in config/guardian.yaml. Set the corresponding API key as an environment variable and select the provider per scan with the --provider flag.

How do I create a custom pentest workflow in Guardian?▼

Create a YAML file in workflows/custom/ defining steps, tools, ai_instructions, and parameter overrides. Run it with `python -m cli.main workflow run --name your_workflow --target <target>`; workflow parameters override config defaults.

Why does Guardian report 'Tool not found: nmap'?▼

This error means the external security tool is not installed on your system. Check available tools with `python -m cli.main tools list` and install missing ones via apt, brew, or choco depending on your platform.

Can Guardian scan private or internal network ranges?▼

By default Guardian blacklists private ranges like 10.0.0.0/8 and 192.168.0.0/16 in the scope configuration. To test internal hosts, add specific entries to the whitelist section of config/guardian.yaml.

How do I generate a penetration test report from a Guardian session?▼

Generate reports with `python -m cli.main report --session <session_id> --format markdown`, html, or json. List past sessions with `python -m cli.main sessions list` to find the session ID.