botron
Use when setting up, running, or managing the Botron autonomous red team agent — Docker-based multi-provider LLM pentesting framework.
Skill by dazeb
Chalk Labs
Need help deploying botron?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/dazeb-botron
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: testing, devops, ml, agent-building
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/botron
What's inside
- Skill name
botron- Description
- Use when setting up, running, or managing the Botron autonomous red team agent — Docker-based multi-provider LLM pentesting framework. Covers install, demo, service management, testing, and provider configuration.
- License
- Apache-2.0
- Instructions
- 179 lines in SKILL.md · view on GitHub
Before installing
- Instructions call the network
Agent Skills spec issues
- name: "botron" does not match folder "hermes-skill"
Files (1)
- SKILL.md
SKILL.md (first lines)
# Botron — Autonomous Red Team Agent Botron is a Docker-based autonomous red team agent with 17 specialist agents orchestrated through LangGraph. It routes all LLM calls through a LiteLLM proxy supporting **10+ AI providers** with automatic failover. Fork of [Decepticon](https://github.com/PurpleAILAB/Decepticon) by PurpleAILAB, enhanced with multi-provider support and stripped of proprietary Claude Code OAuth dependencies. ## When to Use - Setting up Botron for the first time - Running the Metasploitable 2 demo - Managing Docker Compose services (start, stop, logs, health) - Running the Python test suite - Configuring LLM providers - Debugging service startup issues ## Quick Start ```bash # Clone and enter (or use the Hermes tap: hermes skills tap add dazeb/botron) cd ~/projects && git clone https://github.com/dazeb/botron.git cd botron # Create .env from template cp clients/launcher/internal/config/env.example .env ``` Edit `.env` — set at least one API key (`ANTHROPIC_API_KEY`, `OPENAI_API_KEY`, etc.) and add these defaults: ``` LITELLM_MASTER_KEY=sk-botron-master LITELLM_SALT_KEY=sk-botron-salt POSTGRES_PASSWORD=botron NEO4J_PASSWORD=botron-graph BOTRON_MODEL_PROFILE=eco ``` ```bash # Start all services make dev # or: docker compose up -d --build # Open CLI in separate terminal make cli ``` ## Service Management All commands from `~/projects/botron/`: ```bash # Start services with hot-reload make dev # Start services (no watch mode) docker compose up -d --build # Check status docker compose ps make status # Health checks make health # View logs docker compose logs -f langgraph docker compose logs -f litellm # Stop (keep data) docker compose down # Stop + remove all volumes (full reset) make clean ``` ## Run the Demo ```bash cd ~/projects/botron make demo ``` Launches Metasploitable 2, loads a pre-built engagement, and runs the full kill chain autonomously: port scan → vsftpd exploit → Sliver C2 implant → credential harvesting → internal recon. ## Run Tests ```bash cd ~/projects/botron # Python tests (local venv) python3 -m venv .venv && .venv/bin/pip install pytest httpx "langchain-core>=0.3.0" "langchain-openai>=0.3.0" pydantic pydantic-settings pyyaml .venv/bin/python -m pytest tests/unit/llm/ tests/unit/core/ -v # Go launcher tests cd clients/launcher && go test ./... ``` For full test suite (including Docker-dependent tests), run inside the langgraph container after installing pytest there. ## Architecture ``` botron/ ├── botron/ # Python package — agents, LLM, tools, middleware │ ├── llm/ # Model factory, router, model definitions │ ├── agents/ # 17 specialist agents + prompts │ ├── tools/ # Security tools (web, reversing, cloud, AD, research) │ └── core/ # Config, logging, engagement loop ├── config/ │ └── litellm.yaml # LiteLLM proxy model routing (10+ providers) ├── containers/ # Dockerfiles for each service ├── clients/ │ ├── launcher/ # Go CLI (onboard wizard, launcher) │ └── web/ # Next.js dashboard └── langgraph.json # LangGraph graph definitions (17 agents) ``` ### Docker Compose Services | Service | Port | Purpose | |---------|------|---------|
From dazeb/botron, Apache-2.0.
More from dazeb/botron
- 0.509score
c2-sliver
dazeb
Sliver C2 framework operations — server connection, listener setup, implant generation, BOF/Armory extensions, post-implant operations, HTTP C2 profiles.
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
reporting
dazeb
Exploitation finding documentation — initial access reports, exploit chain documentation, CVSS v4.0 scoring, shell/credential inventory, detection gap analysis.
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
engagement-startup
dazeb
Mandatory first-turn startup procedure — checks for existing engagements, resume/new selection, workspace initialization.
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
final-report
dazeb
Final engagement report generation — executive summary, technical report, findings aggregation, attack path narrative, detection gap matrix, remediation…
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
kill-chain-analysis
dazeb
Kill chain analysis and attack path decision-making — findings analysis, attack vector selection, target prioritization, phase transitions.
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
engagement-lifecycle
dazeb
Red team engagement lifecycle management — initiation, phase transitions, go/no-go gates, deconfliction, emergency procedures, completion.
SkillCFreshness: C★ 2Claude Code +9 - 0.501score
orchestration
dazeb
Decepticon orchestrator patterns — delegation, state management, adaptive re-planning, context handoff protocols.
SkillCFreshness: C★ 2Claude Code +9 - 0.445score
ad
dazeb
Active Directory exploitation — BloodHound analysis, Kerberoasting, AS-REP Roasting, AD CS abuse, DCSync, Golden Ticket, Constrained Delegation.
SkillDFreshness: D★ 2Claude Code +9 - 0.443score
web
dazeb
Web application exploitation — the primary category skill for all web-based attacks.
SkillDFreshness: D★ 2Claude Code +9 - 0.441score
credential-access
dazeb
Credential extraction and capture — LSASS dumping, SAM/SECURITY hive extraction, DPAPI decryption, NTLM relay, Responder poisoning, password spraying, hash…
SkillDFreshness: D★ 2Claude Code +9 - 0.440score
c2
dazeb
Framework-agnostic C2 orchestration — listener types, implant modes, redirector architecture, malleable profiles, jitter strategy, OPSEC guidance.
SkillDFreshness: D★ 2Claude Code +9 - 0.440score
benchmark
dazeb
CTF benchmark reference — vulnerability tag mapping, exploitation techniques, and flag capture patterns for automated benchmark challenges.
SkillDFreshness: D★ 2Claude Code +9
Signals
- Stars
- 2
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Apr 28, 2026 (6 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/dazeb/botron
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from dazeb
- 0.509score
c2-sliver
dazeb
Sliver C2 framework operations — server connection, listener setup, implant generation, BOF/Armory extensions, post-implant operations, HTTP C2 profiles.
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
final-report
dazeb
Final engagement report generation — executive summary, technical report, findings aggregation, attack path narrative, detection gap matrix, remediation…
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
kill-chain-analysis
dazeb
Kill chain analysis and attack path decision-making — findings analysis, attack vector selection, target prioritization, phase transitions.
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
engagement-lifecycle
dazeb
Red team engagement lifecycle management — initiation, phase transitions, go/no-go gates, deconfliction, emergency procedures, completion.
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
engagement-startup
dazeb
Mandatory first-turn startup procedure — checks for existing engagements, resume/new selection, workspace initialization.
SkillCFreshness: C★ 2Claude Code +9 - 0.504score
reporting
dazeb
Exploitation finding documentation — initial access reports, exploit chain documentation, CVSS v4.0 scoring, shell/credential inventory, detection gap analysis.
SkillCFreshness: C★ 2Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get botron running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
botron skill. Agent Mart. https://agentmart.dev/skills/dazeb-botron (last updated 2026-10-24)