CarbeneAI

Talon — Security skill for Claude Code

Security community

Penetration Testing MCP for Claude Code.

How to install Talon

This entry records only its repository, not the path inside it, so there is no exact command to give. Open CarbeneAI/Talon and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Talon does

Penetration Testing MCP for Claude Code. AI-assisted security testing with automated recon, service enumeration, and reporting.

Alternatives in Security

Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
Security Advanced Pack — Advanced security testing and analysis 1.6k ★

README

Talon

**Penetration Testing MCP for Claude Code**

![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg) ![Platform: Claude Code](https://img.shields.io/badge/Platform-Claude_Code-purple.svg)

Talon connects Claude Code to a Kali Linux (or any pentesting) VM via SSH MCP, enabling AI-assisted penetration testing with automated recon, structured enumeration, and professional reporting — all from your terminal.

About CarbeneAI

Talon is one of four open-source AI security proofs of concept published by CarbeneAI, alongside [Harbinger](https://github.com/CarbeneAI/Harbinger) (AI threat intel), [Specter](https://github.com/CarbeneAI/Specter) (AI-assisted SIEM), and [Forge](https://github.com/CarbeneAI/Forge) (AI operations platform). They are not the product. They exist so prospects can see CarbeneAI's founder, Clint P. Garrison, understands the end-to-end strategy of AI in security operations.

CarbeneAI is a Fractional CTO + CISO + AI Strategy advisory practice for CEOs and Boards in risk-driven environments. Clint owns the strategy and risk seat at the client table; CarbeneAI's team and partner network deliver execution.

Use this repo. Fork it. Improve it. For CarbeneAI advisory engagement: [carbene.ai](https://carbene.ai)

What It Does

Talon packages the `@anthropic-ai/mcp-server-ssh` server with a complete penetration testing methodology:

AI-directed recon — Ask Claude to run nmap, gobuster, or nikto and get structured analysis
Automated 5-phase reconnaissance — Port discovery, service enumeration, web scanning, SMB, UDP
13-service enumeration guide — Comprehensive commands for every common service
OSCP-style report template — Professional reporting structure for client and certification use
Obsidian vault integration — Engagement and target note templates for organized documentation

The key insight: Claude can e