Agent Skills
› H-mmer/pentest-agents
› quickscan
quickscan
GitHub快速安全扫描技能，通过并行被动侦察和配置审计评估目标风险。新增30分钟分层执行策略，聚焦高信号信息收集与针对性探针，强调证据完整性及结果分级处理。
Trigger Scenarios
需要快速进行初步安全评估
判断目标是否存在明显风险或收益
Install
npx skills add H-mmer/pentest-agents --skill quickscan -g -y
SKILL.md
Frontmatter
{
"name": "quickscan",
"description": "Run a quick security scan on a target. Consults the Brain first, validates scope, runs passive recon + vuln scan in parallel.",
"disable-model-invocation": false
}
ALL agents dispatched by this command MUST use model: "inherit" in the Agent tool call.
Run a quick security assessment on: $ARGUMENTS
Workflow:
- Brain:
uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py brief $ARGUMENTS— check what we already know. Note exhausted areas. - Scope:
uv run python3 $CLAUDE_PROJECT_DIR/tools/scope_check.py $ARGUMENTS— if out of scope, STOP. - Launch IN PARALLEL (skip areas the brain marks EXHAUSTED):
reconagent with passive-only depth, passing brain context about known subdomains/techconfig-auditoragent for headers, CSP, CORS, TLS, cookies
- Record results: for each new finding, run
uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py record <target> <status> <technique> <details> - Log session:
uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py log "quickscan completed on $ARGUMENTS" - Summarize: separate NEW findings from KNOWN, recommend next steps.
Top-Tier Quickscan Loop
Quickscan should answer "is there obvious money or obvious risk here in 30 minutes?"
- Spend the first five minutes on scope, policy headers, brain, and live host sanity.
- Spend the next ten on high-signal passive recon: JS routes, exposed APIs, auth flows, cloud/storage names, source maps, security headers, and known vendor panels.
- Spend ten on two targeted probes only: the best config/information leak candidate and the best auth/tenant-boundary candidate.
- Spend five on triage: new, known, killed, or needs full hunt.
Never report from quickscan alone unless the proof is already complete. Promote strong leads to /hunt, /validate, or /chain.
Version History
- 41d49b6 Current 2026-07-24 11:57
