fullscan

name	fullscan
description	Full security assessment with brain coordination. Multi-phase, skips known-exhausted areas, builds on prior knowledge.
disable-model-invocation	false

ALL agents dispatched by this command MUST use model: "inherit" in the Agent tool call.

Full security assessment on: $ARGUMENTS

Phase 0: Brain Briefing

1. uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py init (if first run)
2. uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py brief $ARGUMENTS
3. uv run python3 $CLAUDE_PROJECT_DIR/tools/scope_check.py $ARGUMENTS

Phase 1: Recon (skip already-discovered assets)

Launch recon agent with brain context. Focus on discovering NEW subdomains and services beyond what's already known.

Phase 2: Scanning (skip exhausted areas)

Launch IN PARALLEL, each with brain context about what's been scanned before:

• vuln-scanner — skip known false positives, focus new hosts
• config-auditor — check if previously noted misconfigs are fixed
• js-analyzer — focus on new/changed JS files

Record all results to the brain after each agent returns.

Phase 3: Targeted Testing (brain-guided)

Based on Phase 2 + brain knowledge, selectively launch ONLY agents targeting UNTESTED or ACTIVE vectors:

• xss-hunter ONLY on endpoints not marked exhausted
• api-audit ONLY on newly discovered or untested endpoints