# Guardian CLI

An enterprise-grade, AI-powered penetration testing automation CLI tool.

- Repository: https://github.com/zakirkun/guardian-cli (1902 stars)
- Category: Testing
- License: see repository
- Last updated: 2026-06-27
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add zakirkun/guardian-cli --skill guardian-cli -g -a claude-code -y`
Codex: `npx skills add zakirkun/guardian-cli --skill guardian-cli -g -a codex -y`
Cursor: `npx skills add zakirkun/guardian-cli --skill guardian-cli -g -a cursor -y`
Gemini CLI: `npx skills add zakirkun/guardian-cli --skill guardian-cli -g -a gemini-cli -y`

## Description

An enterprise-grade, AI-powered penetration testing automation CLI tool. Orchestrates multiple specialized AI agents (Planner, ToolAgent, Analyst, Reporter) backed by 4 AI providers (OpenAI, Claude, Gemini, OpenRouter) and 19 integrated security tools through YAML-defined workflows. Produces professional Markdown, HTML, or JSON security reports with full evidence capture and traceability.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Guardian CLI, Skill Reference

## 1. Project Overview

**Guardian** (v2.0) is a Python 3.11+ CLI application that automates penetration testing workflows using a multi-agent AI system. It is designed for **authorized** security assessments only.

```
guardian-cli/
├── ai/               # AI provider integrations & prompt templates
│   ├── providers/    # base_provider, openai, claude, gemini, openrouter
│   └── prompt_templates/
├── cli/              # CLI entry-point (Typer) & commands
│   └── commands/     # init, scan, recon, analyze, report, workflow, ai, models
├── core/             # Multi-agent orchestration engine
│   ├── agent.py          # BaseAgent
│   ├── planner.py        # PlannerAgent, decides next test step
│   ├── tool_agent.py     # ToolAgent, selects & executes tools
│   ├── analyst_agent.py  # AnalystAgent, interprets tool output
│   ├── reporter_agent.py # ReporterAgent, generates final reports
│   ├── memory.py         # PentestMemory, ToolExecution, Finding dataclasses
│   └── workflow.py       # WorkflowEngine, top-level orchestrator
├── tools/            # 19 security-tool wrappers (one Python file each)
├── workflows/        # YAML workflow definitions (8 built-in)
├── utils/            # logger, scope_validator, helpers
├── config/           # guardian.yaml configuration file
├── reports/          # Output directory for generated reports & session state
└── docs/             # Guides (WORKFLOW_GUIDE, TOOLS_DEVELOPMENT_GUIDE, …)
```

---

## 2. Architecture

### 2.1 Agent Pipeline

```
Target Input
    │
    ▼
WorkflowEngine.run_workflow()  ──or──  WorkflowEngine.run_autonomous()
    │
    ├──► PlannerAgent.decide_next_action(), Strategic AI reasoning
    │
    ├──► ToolAgent.execute_tool(), Runs the chosen security tool
    │
    ├──► AnalystAgent.interpret_output(), Parses & links findings to executions
    │
    └──► ReporterAgent.execute(), Generates markdown / HTML / JSON report
```

The rest: https://github.com/zakirkun/guardian-cli/blob/HEAD//SKILL.md