allsmog

allsmog/vuln-scout

Plugin Claude Code

VulnScout plugins for AI-assisted whitebox security review, deterministic local quick scans, evidence-backed verification, portable reports, and one-release whitebox-pentest compatibility aliases.

allsmog/vuln-scout

Instructions file CodexOpenCode

Instructions for allsmog/vuln-scout, covering vulnscout - development guide, project structure, key commands, development notes and supported languages.

allsmog/vuln-scout

Instructions file

Instructions for allsmog/vuln-scout, covering vulnscout - development guide, project structure, key commands, development notes and supported languages.

allsmog/vuln-scout

Plugin Claude Code

Claude Code plugin for whitebox security review. Stable: deterministic offline quick scan, shared findings.json with stable keys and hotspot-aware findings, SARIF/Markdown/HTML/bundle reports, suppressions, CI fail-on gate, Kuzushi parity. Beta: deep profile with Joern/CodeQL/Slither/Trivy/Checkov when installed.…

allsmog/vuln-scout

Agent

Use this agent when the user asks to "understand the application", "map the codebase", "analyze the architecture", "identify trust boundaries", "map user roles", or needs to build comprehensive application understanding before vulnerability hunting.

allsmog/vuln-scout

Agent

Autonomous attack vector exploration agent that hypothesizes novel attack vectors, tests them against the codebase, and iterates. Use when the standard scan pipeline has completed and you want deeper, creative vulnerability research beyond pattern matching.

allsmog/vuln-scout

Agent

Use this agent when the user asks to "review code for security", "find vulnerabilities", "security audit", "analyze for security issues", or when exploring a codebase with security concerns.

allsmog/vuln-scout

Agent

Use this agent to verify security findings and eliminate false positives. Analyzes code context, data flow paths, and exploitability with structured evidence to determine if a finding is a true positive or false positive.

allsmog/vuln-scout

Agent

Use this agent when the user wants to "test a vulnerability", "confirm exploitation", "debug the application", "verify the finding", or needs guidance on dynamic testing during Phase 2 of whitebox security review.

allsmog/vuln-scout

Agent

Use this agent when the user is auditing a decompiled mobile application (Android jadxout/apktoolout trees, iOS .ipa or Swift source). Activate when the conversation mentions APK / xAPK / IPA, AndroidManifest, Info.plist, jadx, apktool, or any com. package name typical of mobile apps. This agent specializes in…

allsmog/vuln-scout

Agent

Use this agent when the user asks to "fix the vulnerability", "patch the code", "remediate the issue", "secure coding recommendation", or needs help with Phase 4 remediation after identifying vulnerabilities. This agent should also trigger proactively after vulnerabilities are confirmed.

allsmog/vuln-scout

Agent

Use this agent when the user wants to "write an exploit", "create a PoC", "develop proof of concept", "automate the attack", or needs help creating exploit scripts during Phase 3 of whitebox security review.

allsmog/vuln-scout

Agent

Use this agent when the user asks to "create a threat model", "analyze threats", "STRIDE analysis", "what are the threats", "threat modeling", "identify attack vectors", "map attack surface", or needs systematic threat identification with data flow diagrams.

allsmog/vuln-scout

Command

Automatically generate and apply patches for verified security findings. Uses the patch-advisor agent to create context-aware fixes.

allsmog/vuln-scout

Command

Generate a Semgrep YAML rule from a confirmed vulnerability pattern. The rule captures the anti-pattern so future scans detect similar issues across the codebase.

allsmog/vuln-scout

Command

Compare security findings between two git refs. Shows new vulnerabilities introduced, vulnerabilities fixed, and severity changes.

allsmog/vuln-scout

Command

One command to audit any codebase, regardless of size.

allsmog/vuln-scout

Command

End-to-end mobile audit driver for Android targets. Most Android bug-bounty work involves a decompiled APK that's been split into two directories.

allsmog/vuln-scout

Command

Identifies security controls (sanitizers, auth middleware, parameterized queries) in your code, temporarily removes them, and checks if the scanning pipeline detects the resulting vulnerability. Undetected mutations represent detection gaps in your security tooling.

allsmog/vuln-scout

Command

Compile repeated human-reviewed verdicts into .vuln-scout/org-memory/ so future scans can reuse organization-specific suppressions, confirmed patterns, and reviewer heuristics.

allsmog/vuln-scout

Command

When you find one vulnerability, search for the same pattern everywhere else. Developers often make the same mistake repeatedly.

allsmog/vuln-scout

Command

Generate a developer-facing report from .claude/findings.json.

allsmog/vuln-scout

Command

Run automated static analysis and write the results to .claude/findings.json.

allsmog/vuln-scout

Command

Prepare a focused analysis scope for large codebases or monorepos using repomix. Creates a digestible snapshot of the target code for subsequent security analysis.