pentest-agents Skill

How to use pentest-agents Skill

git clone https://github.com/H-mmer/pentest-agents-suite
cd pentest-agents-suite/pentest-agents/providers/codex
codex                       # or: cd ../gemini && gemini, etc.

{
  "servers": {
    "bounty-platforms": {
      "type": "stdio",
      "command": "uv",
      "args": [
        "run",
        "--with",
        "mcp",
        "../../mcp-bounty-server/server.py"
      ]
    },
    "writeup-search": {
      "type": "stdio",
      "command": "uv",
      "args": [
        "run",
        "--with",
        "mcp",
        "../../mcp-writeup-server/server.py"
      ]
    }
  }
}

What is pentest-agents Skill?

pentest-agents is a Python AI agent skill for Cursor, Windsurf, VS Code with uvx/pip, git clone. Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, explo. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.

Key capabilities

• Reusable instructions support
• Includes SKILL.md support
• Shell commands support
• Browser use support
• Document generation support
• OpenAI provider support
• Anthropic provider support

Available tools

Technical details

Install or run pentest-agents using uvx/pip. Check H-mmer/pentest-agents for the latest setup command.

• Built for Python
• Built for Rust
• Install or run with uvx/pip
• Install or run with git clone
• Works with Cursor
• Works with Windsurf
• Works with VS Code
• Works with Codex

Requirements and access

Security and permissions

Review permissions before connecting any MCP server to an agent. Pay special attention to whether it can read local files, write data, call external services, or perform destructive actions.

When to use pentest-agents Skill

• Use it for reusing agent instructions, scripts, and references.
• Use it for agent skills workflows.
• Use it for coding workflows.
• Use it for data workflows.
• Use it for cursor users.

Built with

Explore related resources

Frequently asked questions