Skip to content
Security
Skill

/new

Create a new engagement workspace. Usage: /new <platform> <program> [--type web-app|api|mobile|smart-contract]

BOOST
@h-mmerh-mmer@h-mmer
From plugin
pentest-agents
1.1k39 skills50 agents3 hooks2 MCP

Claude Code

$ npx -y skills add H-mmer/pentest-agents --skill new --agent claude-code

SKILL.md

new.SKILL.md
name: new
description: "Create a new engagement workspace. Usage: /new <platform> <program> [--type web-app|api|mobile|smart-contract]"
disable-model-invocation: false

Create a new engagement workspace: $ARGUMENTS

Parse arguments as: <platform> <program> [--type <template>] Default template: web-app

Run: `uv run python3 $CLAUDE_PROJECT_DIR/tools/scaffold.py $ARGUMENTS`

After creation, tell the user to: cd into the workspace, start claude, and run /sync.

Top-Tier Workspace Bar

A new workspace is not ready until it can support evidence-grade hunting.

After scaffold, verify or create:

  • `scope.yaml` placeholder with platform, program, in-scope and out-of-scope sections
  • `policy.md` placeholder for required headers, rate limits, account rules, and prohibited actions
  • `recon/`, `findings/`, `evidence/`, `poc/`, `reports/drafts/`, and `scans/`
  • brain initialized or clear instruction to run `/brain init`
  • next commands in order: `/sync`, `/pipeline`, `/analyze`, then `/hunt` or `/autopilot`

Warn if the program type needs special setup: mobile test device, API tokens, sandbox tenant, OAuth app, webhook receiver, cloud account, or smart-contract fork.

Read it on GitHub ↗
Stats
PythonJavaScriptBashSQLiteGraphQLCloudflareGitGitHubAnthropicGeminiLangChainMCP
1,077
Stars
197
Forks
Maintained
Maintenance
Python
Language
Last commit
Created

Repo: H-mmer/pentest-agents

In this plugin
50 agents39 skills3 hooks2 MCP
See everything inside
@h-mmer
Ships withpentest-agents

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

1.1k39 skills50 agents2 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
1.1k
Star history of H-mmer/pentest-agents on GitHub, a chart by star-history.com
See what's trending this week

Other skills on pentest-agents.

analyze

analyze

Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>

pentest-agents
@h-mmer@h-mmerInstall Skill
autopilot

autopilot

Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes,…

pentest-agents
@h-mmer@h-mmerInstall Skill
brain

brain

Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted…

pentest-agents
@h-mmer@h-mmerInstall Skill
chain

chain

Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then…

pentest-agents
@h-mmer@h-mmerInstall Skill
See all 39 skills in pentest-agents

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

reverse-skill7w44k
@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

nemoclaw2w23k
@nvidia@nvidiaInstall Skill

Questions about new.

Which coding agents can use new?
new installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.