# pentest-agents

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/h-mmer-pentest-agents
- Source: https://github.com/H-mmer/pentest-agents
- Price: free and open source

## Summary
pentest-agents is a Claude Code plugin with 39 hand-picked skills for security work, indexed on Flowy. Install it with the command on its page. It includes analyze, autopilot, brain. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

## Install (Claude Code)
```
npx -y skills add H-mmer/pentest-agents --agent claude-code
```

## Skills
- analyze
- autopilot
- brain
- chain
- correlate
- cost
- dupcheck
- fullscan
- hunt
- learn
- mindmap
- monitor
- new
- pipeline
- quality
- quickscan
- remember
- report
- resume
- sast
- status
- submit
- surface
- sync
- triage
- validate
- hunt-business-logic
- hunt-idor
- hunt-info-disclosure
- hunt-llm-ai
- hunt-oauth
- hunt-rce
- hunt-xss
- hunting-methodology
- recon-methodology
- report-writing
- sast-methodology
- triage-validation
- vuln-classes

## FAQ

### What is pentest-agents?
Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

### How do I install pentest-agents?
Run these in Claude Code: npx -y skills add H-mmer/pentest-agents --agent claude-code. Then prompt normally.

### Does pentest-agents auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

### Is pentest-agents free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.