orchestrator

Automating multi-phase penetration testing requires orchestrating reconnaissance, attack surface mapping, and vulnerability chaining into a continuous workflow. This skill manages engagement state persistence and delegates exploitation tasks to specialized technique skills, ensuring all phases are executed systematically.

Skill routing in offensive security is the mechanism of intelligently selecting and delegating specific attack tasks to specialized technique skills. The orchestrator uses semantic skill search to match discovered vulnerabilities with the appropriate exploitation modules.

To start a penetration test against a target IP address, you invoke the orchestrator with the specified target. It will automatically initiate network and service discovery, identify open ports, and route to sub-skills to probe for vulnerabilities while providing detailed status updates.

Yes, the orchestrator requires explicit operator approval for all agent invocations. It handles agent execution delegation for infrastructure-focused attacks but pauses at critical decision points to ensure a human operator authorizes active exploitation steps.

Yes, you can use this skill to manage engagement state and track findings. It persistently tracks engagement progress, mapped attack surfaces, and identified targets throughout the penetration testing lifecycle, ensuring no steps are missed.

The primary limitation of using an automated orchestrator for penetration testing is the strict requirement for explicit operator approval at all agent invocations, meaning it cannot run fully autonomous exploitation and requires human interaction for critical decisions.