analyze
Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>
Log a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /remember
$ npx -y skills add H-mmer/pentest-agents --skill remember --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/rememberContext preview
The summary Claude sees to decide when to auto-load this skill.
Log a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /remember
name: remember description: "Log a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /remember" disable-model-invocation: false
Save current finding/pattern to brain memory.
1. Read current session context — what target, endpoint, vuln class 2. Ask user to confirm or edit:
3. Write to brain:
4. Sync to global brain: `uv run python3 $CLAUDE_PROJECT_DIR/tools/global_brain.py learn technique "<pattern>"` 5. Track response if submitted: `uv run python3 $CLAUDE_PROJECT_DIR/tools/response_tracker.py log <id> <status>`
Before writing memory, make it useful to a future agent that has no conversation context.
Use this shape:
target: surface: vuln_class: primitive: accounts_or_roles: evidence_path: request_summary: response_marker: impact: status: next_action:
If the item is rejected, preserve the blocker with the same care as a finding. High-quality negative memory prevents duplicate work and false confidence.
Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.
Repo: H-mmer/pentest-agents
Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine…
Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted [target]' to see dead ends.
Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then describe bug A)
Run the finding correlation engine to discover attack chains from individual findings.