Skip to content
Security
Skill

/learn

Record a platform response and update learning. Usage: /learn <report_id> <status> [--bounty 500] [--vuln-type XSS]

BOOST
@h-mmerh-mmer@h-mmer
From plugin
pentest-agents
1.1k39 skills50 agents3 hooks2 MCP

Claude Code

$ npx -y skills add H-mmer/pentest-agents --skill learn --agent claude-code

SKILL.md

learn.SKILL.md
name: learn
description: "Record a platform response and update learning. Usage: /learn <report_id> <status> [--bounty 500] [--vuln-type XSS]"
disable-model-invocation: false

Record platform response: $ARGUMENTS

1. Parse arguments and run: `uv run python3 $CLAUDE_PROJECT_DIR/tools/response_tracker.py log $ARGUMENTS` 2. Also update brain: `uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py log "Report response: $ARGUMENTS"` 3. Sync to global brain: `uv run python3 $CLAUDE_PROJECT_DIR/tools/global_brain.py sync-from-local` 4. Show updated insights: `uv run python3 $CLAUDE_PROJECT_DIR/tools/response_tracker.py insights`

Top-Tier Learning Loop

Convert every platform response into a future hunting rule.

  • If accepted: record the decisive proof artifact, impact framing, asset type, vuln variant, bounty tier, and why triage agreed.
  • If duplicate: record the duplicated primitive and which uniqueness signal was missing.
  • If N/A: record the exact sentence or policy clause that killed it.
  • If informative: record the missing chain or business impact required to make it payable.
  • If severity changed: record the evidence that moved it up or down.

End with one concrete update: a brain pattern, a never-submit rule, a report wording change, or a target ranking adjustment.

Read it on GitHub ↗
Stats
PythonJavaScriptBashSQLiteGraphQLCloudflareGitGitHubAnthropicGeminiLangChainMCP
1,077
Stars
197
Forks
Maintained
Maintenance
Python
Language
Last commit
Created

Repo: H-mmer/pentest-agents

In this plugin
50 agents39 skills3 hooks2 MCP
See everything inside
@h-mmer
Ships withpentest-agents

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

1.1k39 skills50 agents2 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
1.1k
Star history of H-mmer/pentest-agents on GitHub, a chart by star-history.com
See what's trending this week

Other skills on pentest-agents.

analyze

analyze

Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>

pentest-agents
@h-mmer@h-mmerInstall Skill
autopilot

autopilot

Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes,…

pentest-agents
@h-mmer@h-mmerInstall Skill
brain

brain

Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted…

pentest-agents
@h-mmer@h-mmerInstall Skill
chain

chain

Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then…

pentest-agents
@h-mmer@h-mmerInstall Skill
See all 39 skills in pentest-agents

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

reverse-skill7w44k
@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

nemoclaw2w23k
@nvidia@nvidiaInstall Skill

Questions about learn.

Which coding agents can use learn?
learn installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.