Skip to content
Security
Skill

/quality

Score a report draft before submission. Usage: /quality <draft-path-or-finding-description>

BOOST
@h-mmerh-mmer@h-mmer
From plugin
pentest-agents
1.1k39 skills50 agents3 hooks2 MCP

Claude Code

$ npx -y skills add H-mmer/pentest-agents --skill quality --agent claude-code

SKILL.md

quality.SKILL.md
name: quality
description: "Score a report draft before submission. Usage: /quality <draft-path-or-finding-description>"
disable-model-invocation: false

Quality-check a report draft: $ARGUMENTS

1. If a file path is given, read the draft file. 2. Launch `quality-check` agent with the draft content. 3. Show the score and any issues to fix. 4. If score < 7, recommend specific improvements. 5. If score >= 7, confirm the report is ready for submission.

Top-Tier Quality Bar

Block reports that are merely plausible.

Score against:

  • reproducibility: exact steps, accounts, URLs, headers, and stable artifacts
  • impact proof: real capability demonstrated without prohibited access
  • severity fit: CVSS/vector matches the proven final state, not the hoped-for chain
  • novelty: dupcheck considered and prior art handled
  • evidence hygiene: screenshots, recordings, PoC paths, and request/response pairs exist on disk
  • triage empathy: title, summary, and remediation let the program act fast

If any artifact is missing, say exactly what command or capture step fixes it. Do not let a fluent report compensate for weak proof.

Read it on GitHub ↗
Stats
PythonJavaScriptBashSQLiteGraphQLCloudflareGitGitHubAnthropicGeminiLangChainMCP
1,077
Stars
197
Forks
Maintained
Maintenance
Python
Language
Last commit
Created

Repo: H-mmer/pentest-agents

In this plugin
50 agents39 skills3 hooks2 MCP
See everything inside
@h-mmer
Ships withpentest-agents

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

1.1k39 skills50 agents2 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
1.1k
Star history of H-mmer/pentest-agents on GitHub, a chart by star-history.com
See what's trending this week

Other skills on pentest-agents.

analyze

analyze

Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>

pentest-agents
@h-mmer@h-mmerInstall Skill
autopilot

autopilot

Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes,…

pentest-agents
@h-mmer@h-mmerInstall Skill
brain

brain

Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted…

pentest-agents
@h-mmer@h-mmerInstall Skill
chain

chain

Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then…

pentest-agents
@h-mmer@h-mmerInstall Skill
See all 39 skills in pentest-agents

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

reverse-skill7w44k
@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

nemoclaw2w23k
@nvidia@nvidiaInstall Skill

Questions about quality.

Which coding agents can use quality?
quality installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.