Agent Skills
› H-mmer/pentest-agents
› monitor
monitor
GitHub监控目标状态变化，支持基线捕获、变更检测及范围更新。自动分析主机、接口等变动并关联漏洞风险，优先处理认证、支付等关键区域，引导后续流水线操作并记录日志。
Trigger Scenarios
用户输入 /monitor baseline 进行首次基线采集
用户输入 /monitor check 检测当前与基线的差异
用户输入 /monitor scope 检查平台范围更新
Install
npx skills add H-mmer/pentest-agents --skill monitor -g -y
SKILL.md
Frontmatter
{
"name": "monitor",
"description": "Monitor targets for changes. Usage: \/monitor baseline (first run), \/monitor check (detect changes), \/monitor scope (check platform for scope updates)",
"disable-model-invocation": false
}
Run the monitoring agent: $ARGUMENTS
Parse the mode from arguments:
- If empty or "baseline": Run monitor agent with prompt "Baseline mode. Capture the current state of all in-scope targets. Use recon/ data if available for a richer baseline."
- If "check": Run monitor agent with prompt "Check mode. Compare current state against baselines in monitor/. Report all changes and recommend which agents to re-run."
- If "scope": Run monitor agent with prompt "Scope mode. Use MCP get_program_scope to check if the platform has updated the program scope. Diff against local scope.yaml and report new assets."
After the agent completes:
- If changes were found, show a summary and suggest next actions
- If scope changes were found, ask if the user wants to run /pipeline on new assets
- Log to brain:
uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py log "Monitor {mode}: {summary}"
Top-Tier Monitoring Bar
Treat changes as vulnerability triggers.
- New host: run scope check, tech fingerprint, and surface ranking.
- New endpoint: diff auth requirement, methods, content types, and response schemas against siblings.
- New JS bundle: extract routes, API clients, feature flags, source maps, and changed sinks.
- New policy/scope text: update safe-harbor headers, prohibited actions, asset tiers, payout exclusions, and credential rules.
- Fixed finding: verify remediation without bypass attempts unless authorized, then record the patch pattern for future dupcheck.
Prioritize changes touching auth, billing, admin, integrations, uploads, exports, webhooks, OAuth, AI/tool execution, and tenant boundaries.
Version History
- 41d49b6 Current 2026-07-24 11:57
