domains / families / security / darkmoon-pentest
darkmoon-pentest
authentic
Start, follow and triage authorized autonomous AI pentest runs on a self-hosted Darkmoon Pro instance through its MCP server.
When to use
- Use when the user wants to start an autonomous penetration test against a target they own or are authorized in writing to test, using their own Darkmoon Pro instance.
- Use when the user asks for the status of a Darkmoon run.
- Use when the user wants to list Darkmoon campaigns.
- Use when the user wants to read, group and triage the findings of a Darkmoon campaign.
- Do not use if no Darkmoon Pro instance is available or the `darkmoon` MCP server is not configured.
When not to use
- Requires a self-hosted Darkmoon Pro instance; the open source CLI alone is not enough for this MCP server.
- `run_pentest` actively tests the target and is not read only. The other three tools are read only.
- This skill does not replace a scoped engagement agreement, environment-specific validation or expert review.
- Stop and ask for clarification if the target, scope or authorization is missing.
Skill page
Source