nanoclaw-standalone

Argus — all-in-one information gathering & reconnaissance toolkit. 135 modules covering network infrastructure, web app analysis, and security/threat intelligence. Use for domain recon, subdomain enum, SSL analysis, tech stack detection, vulnerability scanning, and OSINT.

Manage secrets via Bitwarden CLI (bw). Use when pulling secrets into a shell session, creating/updating Secure Notes from .env files, listing vault items, or setting up Bitwarden on a new machine. Secrets live in Bitwarden, get loaded into memory on demand, and die with the shell session — no files on disk.

Develop a thorough, step-by-step specification for a given idea

Set up a recurring build tracker cron job for any GitHub repo. Runs a zero-LLM shell script to detect stale PRs, stale assigned issues, and phase progress, then posts to a Discord channel only when there's something actionable. Use when asked to "track this build every N hours", "prod agents on a project", "set up a build monitor", "watch this repo for stale work", or similar. The tracker is cheap to run — script does all the work, the agent only speaks when findings exist.

Run long-running coding tasks in cloud environments (Claude Code or Codex), with session teleporting and automatic PR creation.

Delegate coding tasks to subagents or run Claude Code/Codex in tmux sessions. Use the Task tool for focused multi-step coding work. Use tmux for long-running interactive sessions, parallel worktree-based fixes, and PR reviews. NOT for simple single-file edits — do those directly.

Create well-formatted git commits for changes made during the session

Get a Distinguished Engineer level technical critique of the current approach

Expose a local service on Tailscale with a unique path

Analyze codebase and identify missing test cases, then create GitHub issues for each gap

Analyze and fix the specified GitHub issue

Generate a handover document for transferring work to another developer or spawning an async agent

Execute implementation plan step-by-step

PentAGI - Penetration testing Artificial General Intelligence. Fully autonomous AI pentest system. Use for: pentest, penetration testing, automated vulnerability scanning, security assessment. Docker-based with 20+ security tools, multi-agent architecture, knowledge graph memory. Located at ~/d/git/pentagi/. NOT for routine code review.

Create a detailed development plan and corresponding GitHub issues

Create a detailed implementation plan

Create a test-driven development plan for the project

Self-improvement through conversation analysis. Extracts learnings from corrections and success patterns, permanently encoding them into agent definitions. Philosophy - Correct once, never again.

Manage and search the research cache for previously analyzed repositories

Conduct comprehensive research across multiple sources - codebase, web, and documentation - by spawning parallel sub-agents and synthesizing findings. Searches past learnings first, then codebase, docs, and optionally web.

From forgetful assistant to self-improving partner. Catches mistakes, learns corrections, remembers everything.

Continuous self-improvement through structured reflection and memory

Guide for using the Sentry CLI to interact with Sentry from the command line. Use when the user asks about viewing issues, events, projects, organizations, making API calls, or authenticating with Sentry via CLI.

Autonomous AI pentest framework for web apps and APIs. Use for: pentest, penetration test, security scan, vulnerability audit, hack this, security review, AppSec, OWASP. Runs via ./shannon start URL=url REPO=name in ~/d/git/shannon/. NOT for routine code review — use argus or webcopilot for lightweight checks.

Create a new swarm team from a Beads epic with N worker agents

Read and send inter-agent messages within a swarm team

Join an existing swarm team as a worker agent

Gracefully shutdown a swarm team

Verify implementation against specifications

Automated web security reconnaissance and vulnerability scanning using WebCopilot. Enumerates subdomains, crawls endpoints, filters vulnerability parameters (XSS, SQLi, SSRF, LFI, RCE, Open Redirect), and scans with nuclei/dalfox/sqlmap.