umbra
Umbra is a Claude Code plugin for autonomous, authorization-gated penetration testing that orchestrates specialist agents across a Kali sandbox (network/host tools) and an agent-browser track (web/DOM testing), with all offensive actions confined to in-scope targets by an explicit allowlist and egress-locked sandbox. The plugin implements recon-first classification, adversarial verification of findings, and structured reporting while enforcing hard guardrails to prevent out-of-scope access.
Install
Source: https://github.com/mushhzz/umbra
What it's made of
2 commands · 15 agents · 2 skills
- Commands
- 2
- Agents
- 15
- Skills
- 2
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (mushhzz).