What problem does it solve? Manual penetration testing is slow, expensive, and often produces unverified findings. This Skill orchestrates the Shannon framework to autonomously analyze source code, identify attack vectors, and execute real exploits that prove vulnerabilities before they reach production. ## Core Features & Use Cases - Autonomous Multi-Agent Pentesting: Runs a 5-phase pipeline (pre-recon, recon, vulnerability analysis, exploitation, reporting) with parallel agents covering Injection, XSS, SSRF, Broken Authentication, and Broken Authorization. - Proof-of-Concept Validation: Follows a "no exploit, no report" policy, so every reported finding includes a reproducible working exploit, minimizing false positives. - Safety Gates: Enforces authorization confirmation, warns against production targets, supports scope limits and avoid-rules for sensitive paths. - Use Case: Point the Skill at a local or staging app with its source code, and receive a full audit report with severity-ranked, exploitable vulnerabilities across 50+ OWASP test cases in about 1-1.5 hours. ## Quick Start Ask the assistant to run a Shannon pentest against your local app, for example by providing the target URL and source repo name such as http://localhost:3000 and myapp.
