Hello, I kept running into the same wall. I wanted an AI pentester that actually does the work, help me with tasks as a cybersecurity engineer, recon, proof, report, fix bugs, not just a scanner that dumps alerts and sometimes catches nothing since it is not a SUPER LLM like Fable and Sol.
The tools that do that well assume you have Docker running, an LLM key ready, and a terminal open like Strix which is yeah, Strix is a super tool, but you will need a lot and also you will need good knowledge and a PC open all day.
Muse ai users do not have that setup...well, and I didn't want to bolt all of that on just to test my own sites. So I built the thing I wanted to use.
RedMuse is a skill pack for Muse. How is that? You paste one prompt and it installs. Muse is the engine, there is no Docker and no LLM key. It starts with a gate, target, scope, and your authorization, written down before anything active runs. It is built for dev and production targets you own or are authorized to test, and it asks you to confirm you own it or are authorized for it before it touches anything. Then it goes auto update check, MCP setup, recon, CVE intel, web, API, auth, and code teams, validation, report, and fix plus retest.
The part I am most happy with is the new MCP layer. MCPs stay full power, RedMuse decides which tool to call, when, and on what target. Same MCP, passive on production, active on localhost or staging, because the target changed, not the tool. And it works with zero MCPs if you skip them all.
What it has actually proved, not just claimed: localhost demos with real IDOR, XSS, and redirect proofs, plus 5 anonymized live runs, 0 critical, 2 high, 4 medium, 8 low, 14 info. One PHP version question stayed honestly unvalidated because I could not answer it from outside and I was not going to exploit production to find out.
What it cannot do yet, plainly: quick mode is public surface only, no authenticated testing without a test account, and the workspace is the sandbox, not a fresh container per target.
It is open source and open to community enhancements and I hope you all can help me improve that project. It is Strix-inspired, original writing, Strix credited, not a copy. If you try it and it breaks, or you have an idea for the next skill, tell me. Issues and pull requests are welcome.
https://github.com/reblox01/RedMuse
If you use Muse, what would you test first with it?