lucy

An AI-assisted framework for security testing that uses many penetration-testing tools through the Model Context Protocol, a standard way for agents to use external tools.

In plain words
What is it for?
Use it for authorised red-team work involving tools such as network scanners, web testing tools, vulnerability checks, and browser automation.
Why use it?
It helps automate parts of security audits and testing across internal networks and applications.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/ktol1/redteam-agent/lucy
Clone the repo
git clone --depth 1 https://github.com/ktol1/RedTeam-Agent
Per session not measured What this adds to a session before it is invoked.
When invoked not measured The whole file, excluding the scripts and references it only reads on demand.
Security scan n/a The body is not available under this licence, so nothing was scanned.
Origin unknown No closer match found in the catalogue.
.github/agents/lucy.agent.md · 1 lines

The source is not reproduced here

No licence file

A repository with no LICENSE is all rights reserved by default, so the body is not copied here. The metadata, the measurements and the link are.

Read it on GitHub

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 1 lines e3b0c44298fc

Subscribe to this mod's changes

lucy is an agent published in the GitHub repository ktol1/RedTeam-Agent (67 stars, last pushed 4mo ago), with no licence file. Its token cost is not measured: this kind of file is read by the harness, not the model. It was not scanned, because the body is not available under its licence. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

osint-collector

Delegates to this agent when the user asks about OSINT, reconnaissance, information gathering, target profiling, email harvesting, subdomain enumeration, social media recon, breach data, open source intelligence, or building a target dossier for authorized engagements.

0xSteph/pentest-ai-agents · 53 tokens

malware-analyst

Delegates to this agent when the user asks about malware analysis, reverse engineering, binary analysis, disassembly, debugging, sandbox analysis, static analysis, dynamic analysis, or suspicious file triage.

0xSteph/pentest-ai-agents · 44 tokens

social-engineer

Delegates to this agent when the user asks about social engineering, phishing campaigns, pretexting, vishing, physical social engineering, security awareness testing, or human-factor security assessments.

0xSteph/pentest-ai-agents · 40 tokens

vuln-scanner

Delegates to this agent when the user wants to run vulnerability scans, identify CVEs in target systems, use tools like nuclei, nikto, or OpenVAS, parse vulnerability scan results, or prioritize vulnerabilities for exploitation during authorized penetration testing.

0xSteph/pentest-ai-agents · 54 tokens

supply-chain-auditor

Delegates to this agent when the user wants to audit software supply chain risk, generate or review an SBOM, hunt for dependency confusion and typosquatting exposure, inspect lockfile and package integrity, review install-time scripts in third-party packages, assess build and artifact provenance, or evaluate the blast…

0xSteph/pentest-ai-agents · 78 tokens

database-attacker

Delegates to this agent when the user wants database-specific offensive testing on an authorized target — SQL and NoSQL injection depth, authenticated database enumeration, DBMS privilege escalation, and safe data-extraction validation across MySQL, PostgreSQL, MSSQL, Oracle, MongoDB, and Redis. Executes with…

0xSteph/pentest-ai-agents · 71 tokens