Skip to content
Security
Skill

/remember

Log a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /remember

From plugin
pentest-agents
1.1k39 skills50 agents3 hooks2 MCP

Claude Code

$ npx -y skills add H-mmer/pentest-agents --skill remember --agent claude-code

SKILL.md

remember.SKILL.md
name: remember
description: "Log a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /remember"
disable-model-invocation: false

Save current finding/pattern to brain memory.

Flow

1. Read current session context — what target, endpoint, vuln class 2. Ask user to confirm or edit:

  • Target: (auto-detected)
  • Endpoint: (from session)
  • Vuln class: (from session)
  • Result: confirmed / rejected / partial
  • Severity: critical / high / medium / low
  • Bounty: $___
  • Notes: ___

3. Write to brain:

  • If confirmed: `uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py record <target> confirmed "<description>" "<details>"`
  • If rejected: `uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py record <target> exhausted "<what failed>" "<why>"`

4. Sync to global brain: `uv run python3 $CLAUDE_PROJECT_DIR/tools/global_brain.py learn technique "<pattern>"` 5. Track response if submitted: `uv run python3 $CLAUDE_PROJECT_DIR/tools/response_tracker.py log <id> <status>`

Why This Matters

  • /resume shows which endpoints you've tested and which remain
  • Cross-target learning: patterns from target A inform hunting on target B
  • Global brain accumulates technique knowledge across all engagements

Top-Tier Recall Standard

Before writing memory, make it useful to a future agent that has no conversation context.

Use this shape:

target:
surface:
vuln_class:
primitive:
accounts_or_roles:
evidence_path:
request_summary:
response_marker:
impact:
status:
next_action:

If the item is rejected, preserve the blocker with the same care as a finding. High-quality negative memory prevents duplicate work and false confidence.

Read more
@h-mmer
Ships withpentest-agents

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

1.1k39 skills50 agents2 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
1.1k
Star history of H-mmer/pentest-agents on GitHub, a chart by star-history.com

Other skills on pentest-agents.

analyze

analyze

Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>

autopilot

autopilot

Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes,…

brain

brain

Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted…

chain

chain

Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then…

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

@nvidia@nvidiaInstall Skill

Questions about remember.

Which coding agents can use remember?
remember installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.