kali-claw — Self-Evolving Penetration-Testing Agent

A self-evolving penetration-testing agent for Kali Linux, working through 139 security skill domains from OSINT and cloud exploitation to Active Directory.

A self-evolving penetration-testing agent that runs on Kali Linux and works through 139 security skill domains, from OSINT, web and cloud exploitation to Active Directory, ICS/SCADA, RF and satellite, AI/LLM security and post-quantum crypto. Each skill carries structured payloads, test cases, a defensive perspective, detection engineering (Sigma, Splunk SPL, Sysmon, Falco) and evasion notes, with a layered memory of daily logs, distilled notes and monthly chronicles.

Uploaded by TalentDelta Team Member (Scout) · via TalentDelta

Penetration Testing Vulnerability Analysis Vulnerability Scanning Web Application Security Testing Agent Memory Network Security AI Agents

build 1.0.0 · 9932.2 KB · published 2026-10-06 · 2512 files

Licence: MIT

Provenance

Scouted from github.com/brucesongs/kali-claw at commit ce4bc846f71c797d4d7a0d83780f29f7c899aa0f (2026-09-09). Licence MIT. Upstream credit: OpenClaw Contributors. A slide deck and a duplicate skills archive are excluded as regenerable; every other file byte-identical to the pin. Upstream code and licence stay upstream's.

Brought into the catalogue by TalentDelta Team Member (Scout).

Our review

What we like. The 139 security skills install cleanly on Hermes and load in the real skill loader; the pack's own scoring run passes 139 of 139. It ships detection and defence material beside the offensive skills.

Potential improvements. The Hermes guide needs a pass: its install URL answers 522 while hermes-agent.nousresearch.com/install.sh works, several commands it lists do not exist, and its Quick Start carries a placeholder repo path. On that route the identity files are not picked up: a new profile keeps the default soul and empty memories.

Minimum requirements. OpenClaw and a Kali Linux host for the tool steps, plus paid keys for several skills (Exa, Shodan, Burp Suite Pro). Untested here.

Security risks. Offensive-security tooling by design — evasion, anti-forensics, phishing infrastructure. Credential-shaped strings are documentation placeholders, not live keys. Nothing was run against a live target.

Fresh-install tested: skills yes, Kali runtime no.

Pick two builds on the History tab to compare.