Menu
Full security assessment with brain coordination. Multi-phase, skips known-exhausted areas, builds on prior knowledge.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]
Adversarial validator for DAST findings. Attempts to DISPROVE each finding and DOWNGRADE severity. Catches inflated reports, unverified assumptions, and theoretical-only bugs. Dispatch after /validate PASS and before /report.
Server-Side Template Injection specialist. Covers Jinja2 (H1 #74), Twig, Velocity, FreeMarker, ERB, Handlebars, Thymeleaf. Use for any rule-engine, comment/message rendering, PR automation, admin template, or user-customizable template surface. Systematic blocklist mapper + CVE bypass runner + runtime-vs-parse distinguisher.
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]
| name | fullscan |
| description | Full security assessment with brain coordination. Multi-phase, skips known-exhausted areas, builds on prior knowledge. |
ALL agents dispatched by this command MUST use in the subagent dispatch tool call.
Full security assessment on: $ARGUMENTS
uv run python3 ../../tools/brain.py init (if first run)uv run python3 ../../tools/brain.py brief $ARGUMENTSuv run python3 ../../tools/scope_check.py $ARGUMENTSLaunch recon agent with brain context. Focus on discovering NEW subdomains and services beyond what's already known.
Launch IN PARALLEL, each with brain context about what's been scanned before:
vuln-scanner — skip known false positives, focus new hostsconfig-auditor — check if previously noted misconfigs are fixedjs-analyzer — focus on new/changed JS filesRecord all results to the brain after each agent returns.
Based on Phase 2 + brain knowledge, selectively launch ONLY agents targeting UNTESTED or ACTIVE vectors:
xss-hunter ONLY on endpoints not marked exhaustedapi-audit ONLY on newly discovered or untested endpointsauth-tester ONLY if new auth flows foundRecord all results to the brain.
uv run python3 ../../tools/dedup_findings.py --scan-dir scans/ --db findings.json --statsuv run python3 ../../tools/brain.py statuspoc-builder for each confirmed findingreport-writer with full brain contextuv run python3 ../../tools/brain.py log "Full scan completed on $ARGUMENTS"A full scan must leave a defensible coverage ledger.
/correlate or /chain on all confirmed and partial findings. Single low bugs should not escape the scan if a plausible chain remains.