CyberStrikeus/CyberStrike

Open-source AI-powered offensive security harness for automated penetration testing.

About the project

CyberStrike is an open-source AI security harness that automates penetration testing by using language models as agents for reconnaissance, vulnerability discovery, exploitation, and reporting. Security practitioners use it to test systems from a terminal, and the catalogue contains skills and settings for its workflow.

This repository also configures its own agents. See what CyberStrike tells them →

2.7kStars on the repository
200Mods indexed here, across every type
yesterdayLast push, which is what freshness is scored on
AGPL-3.0Licence, which decides whether bodies are shown

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure customer-managed keys are used to encrypt AWS Fargate ephemeral storage data for Amazon ECS.

not rated 2.7k +102 yesterday A SkillSpector: pass 28 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure Lambda functions do not allow unknown cross account access via permission policies.

not rated 2.7k +102 yesterday A SkillSpector: warn 23 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure that the runtime environment versions used for your Lambda functions do not have end of support dates.

not rated 2.7k +102 yesterday A SkillSpector: warn 28 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure encryption in transit is enabled for Lambda environment variables.

not rated 2.7k +102 yesterday A SkillSpector: warn 20 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure AWS Secrets manager is configured and being used by Lambda for databases.

not rated 2.7k +102 yesterday A SkillSpector: warn 23 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure least privilege is used with Lambda function access.

not rated 2.7k +102 yesterday A SkillSpector: warn 19 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure Lambda functions are referencing active execution roles.

not rated 2.7k +102 yesterday A SkillSpector: warn 18 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure there are no Lambda functions with admin privileges within your AWS account.

not rated 2.7k +102 yesterday A SkillSpector: warn 23 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure communications between your applications and clients is encrypted.

not rated 2.7k +102 yesterday A SkillSpector: pass 19 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure Consistent Naming Convention is used for Organizational AMI.

not rated 2.7k +102 yesterday A SkillSpector: pass 23 tokens AGPL-3.0

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure EBS volumes attached to an EC2 instance are marked for deletion upon instance termination.

not rated 2.7k +102 yesterday A SkillSpector: pass 27 tokens AGPL-3.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: