Penetration testing workflows involve executing dozens of specialized tools across reconnaissance, enumeration, exploitation, and post-exploitation phases. Managing these tools—each with unique invocation patterns, output formats, and configuration requirements—creates friction that slows testing and increases cognitive load. Ngoto addresses this problem through a plugin-based framework built on three core