Skip to content
Security
Skill

/cost

Show cost tracking and ROI for this engagement.

BOOST
@h-mmerh-mmer@h-mmer
From plugin
pentest-agents
1.1k39 skills50 agents3 hooks2 MCP

Claude Code

$ npx -y skills add H-mmer/pentest-agents --skill cost --agent claude-code

SKILL.md

cost.SKILL.md
name: cost
description: "Show cost tracking and ROI for this engagement."
disable-model-invocation: false

Show engagement cost data.

Run these in sequence: 1. `uv run python3 $CLAUDE_PROJECT_DIR/tools/cost.py summary` 2. `uv run python3 $CLAUDE_PROJECT_DIR/tools/cost.py roi` 3. Provide analysis: which agents consumed the most, whether the spend is justified by findings.

Top-Tier ROI Review

Cost review is a hunting control, not accounting trivia.

  • Segment spend by phase: recon, ranking, hunting, validation, reporting, rework.
  • Flag any agent class with high spend and low durable output: no new surface, no killed hypotheses, no confirmed evidence.
  • Compare spend to expected value: bounty range, report probability, duplicate risk, and remaining proof work.
  • Recommend one concrete budget move: continue, pivot class, reduce parallelism, raise min-score, skip noisy targets, or run a focused chain pass.
  • Treat repeated false positives as a training signal. Link the spend spike to `/learn`, `/brain`, or rules updates.
Read it on GitHub ↗
Stats
PythonJavaScriptBashSQLiteGraphQLCloudflareGitGitHubAnthropicGeminiLangChainMCP
1,077
Stars
197
Forks
Maintained
Maintenance
Python
Language
Last commit
Created

Repo: H-mmer/pentest-agents

In this plugin
50 agents39 skills3 hooks2 MCP
See everything inside
@h-mmer
Ships withpentest-agents

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

1.1k39 skills50 agents2 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
1.1k
Star history of H-mmer/pentest-agents on GitHub, a chart by star-history.com
See what's trending this week

Other skills on pentest-agents.

analyze

analyze

Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>

pentest-agents
@h-mmer@h-mmerInstall Skill
autopilot

autopilot

Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes,…

pentest-agents
@h-mmer@h-mmerInstall Skill
brain

brain

Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted…

pentest-agents
@h-mmer@h-mmerInstall Skill
chain

chain

Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then…

pentest-agents
@h-mmer@h-mmerInstall Skill
dupcheck

dupcheck

Check if a vulnerability has already been reported. Searches platform hacktivity + local findings. Usage: /dupcheck <vuln_type>…

pentest-agents
@h-mmer@h-mmerInstall Skill
See all 39 skills in pentest-agents

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

reverse-skill7w44k
@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

nemoclaw13d23k
@nvidia@nvidiaInstall Skill

Questions about cost.

Which coding agents can use cost?
cost installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.