analyze
Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>
Log a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /remember
Claude Code
$ npx -y skills add H-mmer/pentest-agents --skill remember --agent claude-code
Codex
$ npx skills add H-mmer/pentest-agents --skill remember -a codex -y
Cursor
$ npx skills add H-mmer/pentest-agents --skill remember -a cursor -y
Gemini CLI
$ npx skills add H-mmer/pentest-agents --skill remember -a gemini-cli -y
GitHub Copilot
$ npx skills add H-mmer/pentest-agents --skill remember -a github-copilot -y
OpenCode
$ npx skills add H-mmer/pentest-agents --skill remember -a opencode -y
Windsurf
$ npx skills add H-mmer/pentest-agents --skill remember -a windsurf -y
name: remember description: "Log a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /remember" disable-model-invocation: false
Save current finding/pattern to brain memory.
1. Read current session context — what target, endpoint, vuln class 2. Ask user to confirm or edit:
3. Write to brain:
4. Sync to global brain: `uv run python3 $CLAUDE_PROJECT_DIR/tools/global_brain.py learn technique "<pattern>"` 5. Track response if submitted: `uv run python3 $CLAUDE_PROJECT_DIR/tools/response_tracker.py log <id> <status>`
Before writing memory, make it useful to a future agent that has no conversation context.
Use this shape:
target: surface: vuln_class: primitive: accounts_or_roles: evidence_path: request_summary: response_marker: impact: status: next_action:
If the item is rejected, preserve the blocker with the same care as a finding. High-quality negative memory prevents duplicate work and false confidence.
Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.
Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes,…
Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted…
Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then…
Run the finding correlation engine to discover attack chains from individual findings.
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…