DEDUPED Hot AI repos, turned into use cases Get 5 a day

How to switch between AI providers and models during a long engagement with Pentest Harness

Enable, test, and swap model providers from Settings without leaving the workspace.

Authorization notice. Pentest Harness is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Credentials. Each provider key you add is stored in the owner-only credential store as a reference, so rotate or remove keys there when you stop using a provider.

Who it is forA security researcher who wants to test different AI models on the same kind of task and keep the best one for a multi-day engagement.

The problemSwitching model vendors usually means changing tools or accounts, which breaks the flow of an engagement.

The outcomeSeveral providers configured, tested with live connection checks, and enabled or disabled as needed.

What you need first

  • Node.js 20+ (Node 22 recommended) and pnpm installed
  • An API key from a supported provider such as OpenAI, Anthropic, DeepSeek, or any OpenAI-compatible gateway
  • Written authorization for every target you point the agent at

Steps

  1. Start the workspace with pnpm dsh web after running pnpm install and pnpm build.
  2. Open Settings, then Models, and click Add a custom provider.
  3. Paste your API base URL and enter your API key, which is stored in your local credential store.
  4. Use the provider card to run a live connection test and review the per-model context badges.
  5. Turn providers on or off with the toggles and pick the model you want in the composer.

Prompt for your agent

Using the repo https://github.com/S1N6H/pentest-harness, start the Web UI with `pnpm dsh web` and add the provider at <base_url> under Settings, then Models. Confirm the live connection test passes and the models auto-discover. Report the provider name and the number of discovered models.

Caveat. The README does not state which providers have been tested with the workspace, so verify each connection with the built-in test before relying on it.

Share: X LinkedIn Hacker News Email Copy link

Disclaimer

Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked "Seen in the wild", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email [email protected] and we will look at it promptly. Full disclaimer page