rea
Reverse engineer anything with agents, from app behavior down to native binaries.
420k
@morlutoSecurity
Plugin
vuln-scout
A whitebox penetration testing plugin for Claude Code that covers security skills for AI and ML attacks, business logic flaws, cache poisoning, cloud-native risks and compliance mapping, with threat modeling and Semgrep integration.
Plugin Signal62/100Solid
maintained34
capable85
documented100
adopted30
Claude Code
> /plugin marketplace add allsmog/vuln-scout> /plugin install vuln-scout@vuln-scout
Codex
$ npx skills add allsmog/vuln-scout --skill ai-ml-attacks business-logic cache-poisoning cloud-native compliance-mapping cpg-analysis cross-component cryptographic-failures dangerous-functions data-flow-tracing exception-handling exploit-techniques framework-patterns logging-failures mixed-language-monorepos mobile-android mobile-ios mobile-payments nextjs-react owasp-2025 owasp-api-top10 postmessage-xss sandbox-escapes secret-scanning security-misconfiguration sensitive-data-leakage package-evidence review-pr scope-repo start-audit verify-finding threat-modeling vuln-patterns vulnerability-chains workspace-discovery -a codex
Cursor
$ npx skills add allsmog/vuln-scout --skill ai-ml-attacks business-logic cache-poisoning cloud-native compliance-mapping cpg-analysis cross-component cryptographic-failures dangerous-functions data-flow-tracing exception-handling exploit-techniques framework-patterns logging-failures mixed-language-monorepos mobile-android mobile-ios mobile-payments nextjs-react owasp-2025 owasp-api-top10 postmessage-xss sandbox-escapes secret-scanning security-misconfiguration sensitive-data-leakage package-evidence review-pr scope-repo start-audit verify-finding threat-modeling vuln-patterns vulnerability-chains workspace-discovery -a cursor
Gemini CLI
$ npx skills add allsmog/vuln-scout --skill ai-ml-attacks business-logic cache-poisoning cloud-native compliance-mapping cpg-analysis cross-component cryptographic-failures dangerous-functions data-flow-tracing exception-handling exploit-techniques framework-patterns logging-failures mixed-language-monorepos mobile-android mobile-ios mobile-payments nextjs-react owasp-2025 owasp-api-top10 postmessage-xss sandbox-escapes secret-scanning security-misconfiguration sensitive-data-leakage package-evidence review-pr scope-repo start-audit verify-finding threat-modeling vuln-patterns vulnerability-chains workspace-discovery -a gemini-cli
GitHub Copilot
$ copilot plugin marketplace add allsmog/vuln-scout$ copilot plugin install vuln-scout@vuln-scout
OpenCode
$ npx skills add allsmog/vuln-scout --skill ai-ml-attacks business-logic cache-poisoning cloud-native compliance-mapping cpg-analysis cross-component cryptographic-failures dangerous-functions data-flow-tracing exception-handling exploit-techniques framework-patterns logging-failures mixed-language-monorepos mobile-android mobile-ios mobile-payments nextjs-react owasp-2025 owasp-api-top10 postmessage-xss sandbox-escapes secret-scanning security-misconfiguration sensitive-data-leakage package-evidence review-pr scope-repo start-audit verify-finding threat-modeling vuln-patterns vulnerability-chains workspace-discovery -a opencode
Windsurf
$ npx skills add allsmog/vuln-scout --skill ai-ml-attacks business-logic cache-poisoning cloud-native compliance-mapping cpg-analysis cross-component cryptographic-failures dangerous-functions data-flow-tracing exception-handling exploit-techniques framework-patterns logging-failures mixed-language-monorepos mobile-android mobile-ios mobile-payments nextjs-react owasp-2025 owasp-api-top10 postmessage-xss sandbox-escapes secret-scanning security-misconfiguration sensitive-data-leakage package-evidence review-pr scope-repo start-audit verify-finding threat-modeling vuln-patterns vulnerability-chains workspace-discovery -a windsurf
In this plugin
- skills
- ai-ml-attacks
- business-logic
- cache-poisoning
- cloud-native
- compliance-mapping
- cpg-analysis
- cross-component
- cryptographic-failures
- dangerous-functions
- data-flow-tracing
- exception-handling
- exploit-techniques
- framework-patterns
- logging-failures
- mixed-language-monorepos
- mobile-android
- mobile-ios
- mobile-payments
- nextjs-react
- owasp-2025
- owasp-api-top10
- postmessage-xss
- sandbox-escapes
- secret-scanning
- security-misconfiguration
- sensitive-data-leakage
- package-evidence
- review-pr
- scope-repo
- start-audit
- verify-finding
- threat-modeling
- vuln-patterns
- vulnerability-chains
- workspace-discovery
- commands
- agents
What's inside
35 Skills
/ai-ml-attacksThis skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model deserialization", "unsafe model loading", "Jupyter injection", "LLM security", or needs to identify AI/ML-specific vulnerabilities in codebases that use machine/business-logicThis skill should be used when the user asks about "business logic", "workflow vulnerability", "trust boundary", "state machine", "authorization bypass", "multi-step process", "workflow bypass", "application logic flaw", or needs to identify business logic vulnerabilities during/cache-poisoningThis skill should be used when the user asks about "cache poisoning", "web cache deception", "CDN cache", "proxy cache", "nginx cache", "varnish", "cache key manipulation", "response caching", or needs to find cache-related vulnerabilities during whitebox security review.
- /cloud-native
- /compliance-mapping
- /cpg-analysis
- /cross-component
- /cryptographic-failures
- /dangerous-functions
- /data-flow-tracing
- /exception-handling
- /exploit-techniques
- /framework-patterns
- /logging-failures
- /mixed-language-monorepos
- /mobile-android
- /mobile-ios
- /mobile-payments
- /nextjs-react
- /owasp-2025
- /owasp-api-top10
- /postmessage-xss
- /sandbox-escapes
- /secret-scanning
- /security-misconfiguration
- /sensitive-data-leakage
- /package-evidence
- /review-pr
- /scope-repo
- /start-audit
- /verify-finding
- /threat-modeling
- /vuln-patterns
- /vulnerability-chains
- /workspace-discovery
15 Commands
/auto-fix[experimental] Auto-remediate verified findings by generating patches and optionally creating a PR/create-rule[experimental] Create a custom Semgrep detection rule from a confirmed vulnerability pattern/diff[stable] Compare security posture between two git refs to find new/fixed vulnerabilities and track regression
9 Agents
app-mapperUse this agent when the user asks to "understand the application", "map the codebase", "analyze the architecture", "identify trust boundaries", "map user roles", or needs to build comprehensive application understanding before vulnerability hunting.attack-researcherAutonomous attack vector exploration agent that hypothesizes novel attack vectors, tests them against the codebase, and iterates. Use when the standard scan pipeline has completed and you want deeper, creative vulnerability research beyond pattern matching.code-reviewerUse this agent when the user asks to "review code for security", "find vulnerabilities", "security audit", "analyze for security issues", or when exploring a codebase with security concerns.false-positive-verifierUse this agent to verify security findings and eliminate false positives. Analyzes code context, data flow paths, and exploitability with structured evidence to determine if a finding is a true positive or false positive.local-testerUse this agent when the user wants to "test a vulnerability", "confirm exploitation", "debug the application", "verify the finding", or needs guidance on dynamic testing during Phase 2 of whitebox security review.mobile-auditorUse this agent when the user is auditing a decompiled mobile application (Android jadx_out/apktool_out trees, iOS .ipa or Swift source). Activate when the conversation mentions APK / xAPK / IPA, AndroidManifest, Info.plist, jadx, apktool, or any com.* package name typical of
README
VulnScout's stable promise is an offline quick scan, shared findings.json with stable keys and hotspot-aware findings, SARIF/Markdown/HTML/PR-comment/bundle reports, suppressions, and a CI fail-on gate. It writes audit-plan.md and review-ledger.json for reviewer-driven workflows and exposes structured Claude Code and Kuzushi surfaces.
For MCP hosts, VulnScout also ships a local stdio MCP server with scanner, report, artifact, and Joern CPG tools. See docs/mcp.md.
VulnScout runs scanner binaries and Joern CPGQL locally against the workspace you
provide. The stable quick path uses bundled rules and does not require a remote
service.
Prerequisites
- Python 3.9 or newer
- Semgrep for the stable
quickscan profile - Claude Code for slash-command workflows
- Optional deep analyzers: Joern, CodeQL, Slither, Trivy, Checkov
- Optional code-intelligence sidecar: CodeGraph for symbol search, context, and affected-file analysis
python3 -m pip install semgrep
5-Minute Demo
-
Install the runtime prerequisite:
python3 -m pip install semgrep -
Validate the local runtime:
python3 vuln-scout/scripts/doctor.py --strict -
Scan the bundled vulnerable app and render an HTML report:
python3 vuln-scout/scripts/scan_orchestrator.py demo/vulnerable-app --profile quick --output /tmp/vuln-scout-demo.json python3 vuln-scout/scripts/report.py /tmp/vuln-scout-demo.json --format html --output report.html
Expected quick-profile result: four findings from bundled local rules.
| Severity | Finding |
|---|---|
| high | Python SQL injection |
| high | Python command injection |
| medium | Browser XSS |
| medium | Express open redirect |
Stable Promise
See feature maturity for the full stability matrix.
| Capability | Status |
|---|---|
| Offline quick scan with bundled rules | Stable |
Shared findings.json schema and stable keys | Stable |
| SARIF, Markdown, HTML, and bundle reports | Stable |
Suppressions and CI --fail-on gate | Stable |
| Kuzushi structured tool surface | Stable |
| Joern, CodeQL, Slither, Trivy, Checkov deep analyzers | Beta when installed |
| Auto-fix, PoC, and mutation workflows | Experimental |
Install
Primary paths are documented in docs/install.md. The quickest product check is the demo above; after that, use the Claude Code plugin command path.
claude plugin install vuln-scout
claude --plugin-dir ./vuln-scout
npm install @kuzushi/vuln-scout
Canonical Workflows
| Workflow | Command | Guide |
|---|---|---|
| Full audit | /vuln-scout:full-audit | First run |
| Verify finding | /vuln-scout:verify | PR review |
| Report | /vuln-scout:report | CI |
| Scope repo | /vuln-scout:scope | First run |
| Diff review | /vuln-scout:diff | PR review |
Commands (15 total)
Advanced commands
| Command | Maturity | Purpose |
|---|---|---|
/vuln-scout:scan | beta | Run quick, deep, or audit scan profiles |
/vuln-scout:mobile-audit | beta | Audit decompiled Android targets (jadx_out + apktool_out merged) |
/vuln-scout:threats | beta | Build STRIDE threat models |
/vuln-scout:sinks | beta | Find dangerous functions and output sinks |
/vuln-scout:trace | beta | Trace source-to-sink data flow |
/vuln-scout:propagate | beta | Find related instances of a confirmed pattern |
/vuln-scout:create-rule | experimental | Generate custom Semgrep rules |
/vuln-scout:org-memory-compile | experimental | Compile human-reviewed org memory |
/vuln-scout:mutate | experimental | Mutation-test security controls |
/vuln-scout:auto-fix | experimental | Generate patches for verified findings |
Feature Maturity
| Surface | Stable | Beta | Experimental |
|---|---|---|---|
| Profiles | quick | deep, audit | custom-rules |
| Reports | SARIF, Markdown, HTML, PR comment, bundle | generated PoCs | generated exploit harnesses |
| Workflows | full-audit, verify, report, scope, diff | scan, threats, sinks, trace, propagate | create-rule, mutate, auto-fix |
Kuzushi Integration
The npm package exports Kuzushi tools that return structured results:
{ ok, output, artifacts, maturity, toolName }
Kuzushi exposes the same 15 command names as the Claude plugin. Its structured schemas cover the common flags; advanced reviewer workflows still live in the Claude Code command prompts.
The report tool supports sarif, md, json, html, pr-comment, and bundle.
MCP Server
Use the bundled MCP server when an MCP host should call VulnScout directly:
python3 vuln-scout/scripts/mcp_server.py
The server exposes vulnscout_scan, vulnscout_report, vulnscout_create_cpg, vulnscout_joern_query, vulnscout_joern_discover, vulnscout_verify_findings, CodeGraph sidecar tools, vulnscout_read_artifact, and vulnscout_doctor. Joern and CodeGraph tools return structured unavailable states when their binaries or indexes are not installed, and report content is opt-in to keep MCP responses compact.
Project Structure
vuln-scout/
.claude-plugin/plugin.json
agents/
commands/
hooks/
skills/
references/
scripts/
35 Auto-Activated Skills
The plugin ships 27 knowledge skills plus 5 task skills under vuln-scout/skills/tasks/.
Audit Artifacts
.claude/audit-plan.mdcaptures scope, module priority, attack surfaces, and verification strategy..claude/review-ledger.jsonrecords adversarial review rounds and approvals..claude/findings.jsonfollowsvuln-scout/references/findings.schema.json.
Migration
Users upgrading from 3.x should read docs/migration-3.x-to-3.2.md. /whitebox-pentest:* aliases remain as deprecated shim files for one release and are shipped as a legacy plugin root.
License
MIT
Stars on GitHub
Momentum
- stars in total
- 26
File tree
Similar plugins.
@morlutoreverse-skill
A skill pack for authorized reverse engineering, security research, and penetration testing that routes tasks to the right skill and sets up needed tools on demand. It covers API security assessment and Android APK analysis, among others.
46 skills44k
@zhaoxuya520cybersecurity-skills
Gives an AI agent the step-by-step workflow a senior security analyst follows, covering when to use each technique, what to check first, how to run it and how to verify the result. Covers incident response, forensics, threat intelligence, malware analysis, penetration testing and red teaming.
200 skills36k
@mukul975watermarks-remover
Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files, for privacy and hygiene on content you own. The skill is a thin client: it drives the machinery over HTTP, so the agent host needs no Python.
2 skills1 hook26k
@guillaumemeyerQuestions about vuln-scout.
A whitebox penetration testing plugin for Claude Code that covers security skills for AI and ML attacks, business logic flaws, cache poisoning, cloud-native risks and compliance mapping, with threat modeling and Semgrep integration. Install it with the command on its page. It includes ai-ml-attacks, business-logic, cache-poisoning. Its skills do not fire on their own yet. Free and open source.
- What is vuln-scout?
- A whitebox penetration testing plugin for Claude Code that covers security skills for AI and ML attacks, business logic flaws, cache poisoning, cloud-native risks and compliance mapping, with threat modeling and Semgrep integration.
- How do I install vuln-scout?
- Run these in Claude Code: /plugin marketplace add allsmog/vuln-scout then /plugin install vuln-scout@vuln-scout. Then prompt normally.
- Does vuln-scout auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin.
- Is vuln-scout free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.
- Which coding agents can use vuln-scout's skills?
- vuln-scout installs in Claude Code, and its skills also install in Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI. Each skill's page has the install command. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it