shannon
unicodeveloper2.9k installs
Prove web vulnerabilities before they reach production.
What it does
Produces proof-backed vulnerability findings for web apps and APIs by analyzing source code and executing real exploits.
When to use it
Use for white-box pentests, security audits, or vulnerability scans of web applications and APIs.
How to use it
Give it a target URL and source project; after authorization and launch confirmations, it saves a pentest report and presents a summary.
What you provide
- target URL
- source code folder name
- An existing project
Uses
AB
GV
Good to know
- starts 5 helper agents
- cannot be undone: Anthropic API
Latest review
What you need · 7
Docker must be installed because Shannon runs its attack tools in containers.
Requires access to one supported provider: Anthropic API or OAuth, AWS Bedrock, or Google Vertex AI.
Access · 7
This skill
Anthropic API
Write
Sends paid prompts to Anthropic (irreversible)
target application
Write
Attacks the target application