使用 Guardian CLI 运行授权的 AI 辅助渗透测试工作流
Use Guardian CLI to orchestrate authorized penetration tests with AI planning, tool selection, evidence capture, triage, and reporting across common security scanners.
Prerequisites
Python 3.11+, Guardian CLI, configured AI provider, optional security tools such as nmap, httpx, subfinder, nuclei, nikto, sqlmap, wpscan, testssl, sslyze, gobuster, ffuf, arjun, xsstrike, gitleaks, cmseek, and dnsrecon
Installation
Use the upstream install or setup path that matches your environment:
- git clone https://github.com/1991513ccie-png/skills
- pip install -e .
- pip install -e ".[dev]"
- pip install -e . --force-reinstall
Requirements and caveats from upstream:
-
- Plugin Provider Contract: Third-party providers ship via [project.entry-points."guardian.providers"] — no fork required
- python -m venv venv
Basic usage or getting-started notes:
- Features • Installation • Quick Start • Documentation • Contributing
- DAG Scheduler: Steps with depends_on run in parallel up to max_parallel_tools
- AI Decision Traces: Token usage, cost, thinking-chain ledger per agent
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/zakirkun/guardian-cli/HEAD/README.md
Documentation
- https://github.com/1991513ccie-png/skills
