Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Source
GitHub
Language
Python
Last activity
Oct 17, 2026
Stars20,505Measured · Oct 19, 2026
Momentum68.47 days · Measured · +2.14% relative change
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
Source
GitHub
Language
Go
Last activity
Oct 16, 2026
Stars3,017Measured · Oct 19, 2026
Momentum64.17 days · Measured · +5.16% relative change
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
Source
GitHub
Language
Python
Last activity
Oct 18, 2026
Stars3,149Measured · Oct 19, 2026
Momentum60.77 days · Measured · +4.1% relative change
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Source
GitHub
Language
TypeScript
Last activity
Oct 15, 2026
Stars49,092Measured · Oct 19, 2026
Momentum58.77 days · Measured · +0.59% relative change