A command is the one you type. It runs exactly when you ask it to, and never before.
426 commands across 357 plugins.
Generate CAIQ (Consensus Assessments Initiative Questionnaire) responses
@grcengclubView CommandArchive completed milestone and prepare for next version
@backbay-labsView CommandSystematic debugging with persistent state across context resets
@backbay-labsView CommandRoute freeform text to the right hunt or THRUNT command automatically
@backbay-labsView Command[beta] Run quick, deep, or audit scan profiles and emit a shared findings artifact
@allsmogView Command[stable] Prepare focused analysis scope for large codebases, list workspaces in monorepos
@allsmogView Command[beta] Search for dangerous functions (sinks) and auto-discover output patterns
@allsmogView CommandShow token usage and estimated cost per model from your local AKA store
@akasecurityView CommandGenerate a responsible-disclosure bounty submission from a confirmed finding — Immunefi / protocol bounty / SEAL 911 formats.
@omermaksutiiView CommandSubmit a finding to a bug-bounty platform (Immunefi, Cantina) automatically.
@omermaksutiiView CommandGenerate a shareable PNG audit card from the latest /audit. Optimized for social media.
@omermaksutiiView CommandRun the pre-commit security gate on the current changeset and report a single pass/fail verdict.
@jassicsView CommandRun an AI safety review for a feature/model — harms, evaluations, guardrails, and a documented safety case.
@jassicsView CommandAssess technology/security risk for a strategic decision and frame the secure-by-design path.
@jassicsView CommandCCCS assessment process and certified cloud provider guidance
@grcengclubView CommandExecute a trivial task inline — no subagents, no planning overhead
@backbay-labsView CommandPost-mortem investigation for failed THRUNT workflows — analyzes git history, artifacts, and state to diagnose what went wrong
@backbay-labsView CommandDiagnose planning directory health and optionally repair issues
@backbay-labsView Command[beta] Application understanding + threat modeling - maps architecture, generates DFDs, performs STRIDE analysis
@allsmogView Command[beta] Trace data flow from sources to a specific sink with explicit evidence requirements
@allsmogView Command[stable] Verify findings with Joern plus code review and update the shared findings artifact
@allsmogView CommandRun forge coverage, identify untested branches, generate tests to close gaps.
@omermaksutiiView CommandRun Rugproof against the bundled vulnerable example contracts — first-run "wow moment".
@omermaksutiiView CommandDiff the contract against a canonical reference implementation (OZ, Solady, Uniswap V3, etc.) and flag suspicious deltas.
@omermaksutiiView CommandTriage a SOC alert end-to-end — validate, enrich, decide, and escalate or close with rationale.
@jassicsView CommandGenerate ISO 27001 certification roadmap from readiness through surveillance audits
@grcengclubView CommandSet up GitHub Actions CI/CD with OIDC for keyless AWS authentication — automatic deployment on every push to main.
@grcengclubView CommandNYDFS CISO role, qualifications, and responsibilities
@grcengclubView CommandShow available THRUNT threat hunting commands and artifact layout
@backbay-labsView CommandInsert urgent work as decimal phase (e.g., 72.1) between existing phases
@backbay-labsView Command© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic
