audit
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open switches, weak crypto, permissive…
A command is the one you type. It runs exactly when you ask it to, and never before.
523 commands across 665 plugins.
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open switches, weak crypto, permissive…
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from high-signal repos. Use to…
Run autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable checkpoints. Usage: /autopilot…
HIBP k-anonymity check on a password wordlist. Enriches each password with its breach count, ranks DESC. Free API (no key), only first 5 chars of SHA-1 sent.…
Run autonomous hunt loop on a target — scope check → recon → rank surface → hunt → validate → report with configurable checkpoints. Usage: /autopilot…
Build an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common chain patterns: IDOR→ATO, SSRF→cloud metadata,…
Active vulnerability hunting. Two-track dispatcher — asks Red Team vs WAPT, hands off to hunt-dispatch skill and sibling commands. Usage: /hunt target.com |…
List pentest-ai agents relevant to a domain or tag (web, ad, cloud, mobile, recon, etc.).
{ "name": "memory", "description": "Update the project memory with what was accomplished in this session", "prompt": "Update the project memory file at…
Recommend the right pentest-ai agent and concrete next steps for a freeform task description.
THE ENTRY POINT for cti-expert. Investigate any target — domain, IP, email, username, phone, wallet, hash or APK. Routes to the right chain automatically.…
Run the full deterministic pipeline on one or more seeds: collect, ingest, prior-overlap, risk, cluster, ICD-203 assessment. Usage: /cti-case <CASE-ID> <seed>…
False-positive control — is this indicator a real operator link or shared noise? Run BEFORE clustering on anything. Usage: /cti-check <indicator>
Prepare a new release for sandvault. This command updates the changelog, bumps the version, and creates a PR
Deep dive analysis of ISO 27001 Annex A control domains with implementation guidance
Execute Phase 7 - Actions on Objectives and Goal Achievement
Crash → root cause → reachability → empirical exploitability verdict (native bugs)
Apply the approved improvements from the latest memory-self-review PROPOSAL. Auto-applies the safe, reversible doc/memory edits (with backups); queues…
Post-commit verification wave — dispatch gate-runner, drift-auditor, and
Recurring find-and-fix quality pass over the whole DashClaw app — browser smoke (frontend-verify) + code gates → triage → parallel worktree fixes → verify →…
Launch the V2 deterministic Smart Contract audit pipeline (same as /plamen-wizard). Usage: /plamen [light|core|thorough] [path]
Launch the V2 deterministic L1 audit pipeline for Go/Rust node clients (same as /plamen-l1-wizard). Experimental.
Plamen v2 L1 infrastructure audit wizard. Collects config, launches deterministic driver.
Install the prompt injection defender hooks into your Claude Code project.
You are working in a project with the Prompt Injection Defender installed.
Decompile an Android APK/XAPK/AAB/DEX/JAR/AAR and analyze its structure
Full SAIL V2 gap analysis of the AI agent/system in the current repo — component inventory, all 91 catalog risks dispositioned, prioritized recommendations.…
SAIL V2 compliance checklist — ISO/IEC 42001, EU AI Act, OWASP LLM/Agentic, DASF, AIUC-1. All five frameworks by default, or only those named.
Vendor RFP questionnaire from the SAIL V2 catalog — security-vendor coverage questionnaire by default, platform-vendor framing on request.
Activate pentest mode — displays ASCII art, configures session isolation, collects engagement scope, then OWNS the engagement: pre-flight, recon, planning (via…
Define the attack profile for an engagement — select which attack categories and skills to use. Saves to .pentest-attacks.json. If run before /pentest:pentest,…
Close pentest session — summarizes findings, ensures outputs are saved, lifts isolation, and prompts for /clear
Route an attack vector to the appropriate specialist agent — usage: /project:attack <target> <vector>
Start a new engagement for a target — verifies scope, creates evidence directories, and launches recon agent
Full scope-gated security audit of a Solana / full-stack repository — discovery, context reconstruction, per-item checklist verdicts, false-positive…
Flow B — AI-assisted iterative audit with a human in the loop. Same lifecycle as audit-cycle, but pauses at checkpoints to surface confirmed findings, the…
Flow A — fully automated audit-firm lifecycle. Runs scope → context → tool-assisted first pass → domain-partitioned manual review → independent reconciliation…
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic