analyze
Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>
Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted [target]' to see dead ends.
Claude Code
$ npx -y skills add H-mmer/pentest-agents --skill brain --agent claude-code
Codex
$ npx skills add H-mmer/pentest-agents --skill brain -a codex -y
Cursor
$ npx skills add H-mmer/pentest-agents --skill brain -a cursor -y
Gemini CLI
$ npx skills add H-mmer/pentest-agents --skill brain -a gemini-cli -y
GitHub Copilot
$ npx skills add H-mmer/pentest-agents --skill brain -a github-copilot -y
OpenCode
$ npx skills add H-mmer/pentest-agents --skill brain -a opencode -y
Windsurf
$ npx skills add H-mmer/pentest-agents --skill brain -a windsurf -y
name: brain description: "Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted [target]' to see dead ends." disable-model-invocation: false
Brain management: $ARGUMENTS
Route to the brain tool:
After running, also launch the `brain` agent to update the MEMORY.md index if any state changed.
Bad memory makes the whole suite worse. Record facts as reusable evidence, not diary entries.
For every record, include:
Never store "no bug" without the tested matrix. An exhausted entry must say what was tried and why that evidence is strong enough to skip it later.
Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.
Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes,…
Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then…
Run the finding correlation engine to discover attack chains from individual findings.
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…