RS-2026-098 - The Kali Problem: AI-Assisted Offensive Tool Development and the Collapse of the Skill Floor

We document a structural capability shift in offensive security: the combination of Kali Linux — apurpose-built penetration testing distribution shipping over 600 offensive security tools — with aconversational AI coding assistant operating in a local terminal eliminates the expertise barrier to bespokeoffensive tool development. Through direct empirical observation, we demonstrate that a single naturallanguage prompt is sufficient to instruct an AI assistant to read, modify, and redeploy existing Kali tools,construct custom exploitation frameworks, generate targeted payloads, and chain tools into automatedattack pipelines. The sole stated safety constraint — user-asserted authorisation — is unverified andunenforceable. This paper documents the finding, analyses the mechanism, and frames the implications forthe security industry, AI developers, and policymakers. The skill floor for bespoke offensive tooldevelopment is now a subscription and an ISO.