Skip to content

Claude Skills by H-mmer

github.com/H-mmer

182 skillsA× 169B× 7C× 1D× 2F× 32 installs158 views

Agent Sast Danger MapperAMaps dangerous operations in a source file: memory ops, type casts, arithmetic near trust boundaries, free/dealloc patterns. Pattern matching task — list what you see, don't speculate. Use via /sast command.securitypythonrustVotes: 0GitHub stars: 815
Agent Sast Devils AdvocateAAdversarial validator for SAST findings. Your ONLY job is to DISPROVE the candidate. Find every reason it's not exploitable. If you can't disprove it, it survives. Use via /sast command.securityrustphpVotes: 0GitHub stars: 815
Agent Sast Entry MapperAMaps entry points where untrusted data enters a source file. Lists every function that receives external input with data type, size constraints, and initial validation. Use via /sast command.ai-agentspythonrustVotes: 0GitHub stars: 815
Agent Sast Exploit BuilderABuilds working exploits from confirmed SAST findings. Takes a confirmed crash, develops it into a full exploit. Tier 1 (DoS) → Tier 5 (code execution). Use via /sast command after PoC confirmation.securityrustgoVotes: 0GitHub stars: 815
Agent Sast File RankerASource file attack surface ranker. Reads a repository, scores every source file 1-5 by exploitability. Outputs ranked JSON for per-file hunting. Use via /sast command.securitypythonrustVotes: 0GitHub stars: 815
Agent Sast Flow TracerATraces data flow from entry points to dangerous operations. Cross-file reasoning to determine which entries can reach which dangers, and what validation exists in between. MUST run on Opus for reasoning depth. Use via /sast command.ai-agentsrustgoVotes: 0GitHub stars: 815
Cmd AnalyzeAAnalyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>securitypythonapiVotes: 0GitHub stars: 815
Cmd AutopilotAAutonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early stops, no clarifying questions, no auxiliary-agent substitution. Usage: /autopilot target.com [--interactive|--autonomous] [--20m-off] [--resume]ai-agentsjavascriptpythonVotes: 0GitHub stars: 815
Cmd BrainAManage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted [target]' to see dead ends.ai-agentspythonVotes: 0GitHub stars: 815
Cmd ChainABuild deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then describe bug A)ai-agentspythonapiVotes: 0GitHub stars: 815
Cmd CorrelateARun the finding correlation engine to discover attack chains from individual findings.ai-agentspythonnodeVotes: 0GitHub stars: 815
Cmd CostAShow cost tracking and ROI for this engagement.ai-agentspythonVotes: 0GitHub stars: 815
Cmd DupcheckACheck if a vulnerability has already been reported. Searches platform hacktivity + local findings. Usage: /dupcheck <vuln_type> e.g. /dupcheck XSS in search endpointai-agentspythondatabaseVotes: 0GitHub stars: 815
Cmd FullscanAFull security assessment with brain coordination. Multi-phase, skips known-exhausted areas, builds on prior knowledge.ai-agentspythontestingVotes: 0GitHub stars: 815
Cmd HuntAActive vulnerability hunting on a target. Loads scope, reads brain, detects tech stack, runs targeted tests with concrete payloads. Usage: /hunt target.com [--vuln-class idor|xss|ssrf|sqli|ssti|oauth|rce|race|graphql|upload|business-logic|llm-ai]ai-agentsjavascriptpythonVotes: 0GitHub stars: 815
Cmd LearnARecord a platform response and update learning. Usage: /learn <report_id> <status> [--bounty 500] [--vuln-type XSS]ai-agentspythonVotes: 0GitHub stars: 815
Cmd MindmapAGenerate a text-based attack surface mindmap. Shows tech stack → vuln class → endpoint relationships. Usage: /mindmap <target>ai-agentspythonrustVotes: 0GitHub stars: 815
Cmd MonitorAMonitor targets for changes. Usage: /monitor baseline (first run), /monitor check (detect changes), /monitor scope (check platform for scope updates)ai-agentspythonapiVotes: 0GitHub stars: 815
Cmd NewACreate a new engagement workspace. Usage: /new <platform> <program> [--type web-app|api|mobile|smart-contract]ai-agentspythonapiVotes: 0GitHub stars: 815
Cmd PipelineAPrepare the battlefield — recon, scanning, and surface ranking. Stops before hunting. Run /hunt or /autopilot after. Usage: /pipeline or /pipeline <target>ai-agentsjavascriptpythonVotes: 0GitHub stars: 815
Cmd QualityAScore a report draft before submission. Usage: /quality <draft-path-or-finding-description>ai-agentsVotes: 0GitHub stars: 815
Cmd QuickscanARun a quick security scan on a target. Consults the Brain first, validates scope, runs passive recon + vuln scan in parallel.ai-agentspythonapiVotes: 0GitHub stars: 815
Cmd RememberALog a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /rememberai-agentspythonVotes: 0GitHub stars: 815
Cmd ReportAGenerate submission-ready reports for all confirmed findings. Runs dedup, PoC builder, quality check, and report writer. Usage: /report bounty or /report pentestai-agentspythonVotes: 0GitHub stars: 815
Cmd ResumeAResume a previous hunt. Shows hunt history, untested endpoints, memory-informed suggestions. Usage: /resume target.comai-agentspythonapiVotes: 0GitHub stars: 815
Cmd SastASource code vulnerability hunting (SAST). Decomposes analysis into specialized passes: map entry points, map dangerous ops, trace flows, find gaps, adversarial validation, exploit. Usage: /sast <repo_path> [--lang c|cpp|rust|java|python|go|php] [--min-score 4] [--max-files 30] [--skip-static] [--best-of N]securitypythonrustVotes: 0GitHub stars: 815
Cmd StatusAShow engagement dashboard with program info, scope, brain state, findings, agent activity, and cost estimate.ai-agentspythonVotes: 0GitHub stars: 815
Cmd SubmitADraft and submit a vulnerability report to the bug bounty platform. Reads scope.yaml for platform/program, uses brain + findings for content. Always drafts first for review.ai-agentspythonapiVotes: 0GitHub stars: 815
Cmd SurfaceAShow ranked attack surface for a target. Invokes recon-ranker agent. Usage: /surface target.comai-agentstestingVotes: 0GitHub stars: 815
Cmd SyncASync program scope, policy, and hacktivity from a bug bounty platform. Usage: /sync hackerone tesla or /sync bugcrowd uberai-agentspythontestingVotes: 0GitHub stars: 815
Cmd TriageABatch-validate ALL findings through the 7-Question Gate. Kills weak findings in bulk. Usage: /triageai-agentspythonapiVotes: 0GitHub stars: 815
Cmd ValidateAValidate a finding through the 7-Question Gate + 4 gates. Kills weak findings FAST. Usage: /validate <finding description>ai-agentspythonVotes: 0GitHub stars: 815