Orchestrate authorized penetration testing workflows against scoped targets.
npx skills add https://github.com/XAIHT/Tlamatini --skill kali-pentest
Please help me install this Agent Skill. Skill: kali-pentest Source: https://github.com/XAIHT/Tlamatini/tree/main/Tlamatini/agent/skills_pkg/kali_pentest Command: npx skills add https://github.com/XAIHT/Tlamatini --skill kali-pentest
This Skill automates an authorized, end-to-end penetration-testing workflow by orchestrating recon, enumeration, credential testing, and reporting within a defined scope.
Tell kali-pentest the target and allowed scope to begin the authorized assessment and receive a findings report.
High-intent search queries and answers about installing and using this skill.
Automate authorized pentest workflows by orchestrating port discovery with nmap and service enumeration using gobuster, dirb, and nikto. The process identifies exposed services and weaknesses within a defined scope.
An authorized penetration test scope defines explicit boundaries for assessing a target. Defining the scope ensures health probes, enumeration, and credential attacks only run against permitted systems and produce valid findings.
Yes, hydra and john support credential and hash attacks during a scoped engagement. The workflow integrates these tools to test authentication weaknesses and can optionally chain findings into Metasploit exploits.
Generate a security findings report by running web app enumeration with sqlmap or wpscan and defining a report_path parameter. The workflow outputs a consolidated summary of identified weaknesses for stakeholders.
Yes, kali-pentest requires a server_url input to initialize the MCP-Kali-Server Kalier integration. You must also provide the target, objective, and allowed scope to begin the authorized assessment.
Automated enumeration for penetration testing is limited to identifying exposed services and known weaknesses within a defined scope. It requires explicit authorization boundaries and cannot replace manual validation of complex logic flaws.
cyberAlchemyAIConvert development intent into governed lifecycle artifacts with mode contracts.
CyberSecAIIdentify authentication weaknesses using 49 ASVS-aligned rules.
AndyAnh174Enumerates SSH configurations and tests credentials with Nmap, Hydra, and ssh-audit.
ramzxyAutomate CTF target reconnaissance with nmap, ffuf, and curl.
