ALL agents dispatched by this command MUST use in the subagent dispatch tool call.
Run a quick security assessment on: $ARGUMENTS
Workflow:
- Brain:
uv run python3 ../../tools/brain.py brief $ARGUMENTS — check what we already know. Note exhausted areas.
- Scope:
uv run python3 ../../tools/scope_check.py $ARGUMENTS — if out of scope, STOP.
- Launch IN PARALLEL (skip areas the brain marks EXHAUSTED):
recon agent with passive-only depth, passing brain context about known subdomains/techconfig-auditor agent for headers, CSP, CORS, TLS, cookies
- Record results: for each new finding, run
uv run python3 ../../tools/brain.py record <target> <status> <technique> <details>
- Log session:
uv run python3 ../../tools/brain.py log "quickscan completed on $ARGUMENTS"
- Summarize: separate NEW findings from KNOWN, recommend next steps.
Top-Tier Quickscan Loop
Quickscan should answer "is there obvious money or obvious risk here in 30 minutes?"
- Spend the first five minutes on scope, policy headers, brain, and live host sanity.
- Spend the next ten on high-signal passive recon: JS routes, exposed APIs, auth flows, cloud/storage names, source maps, security headers, and known vendor panels.
- Spend ten on two targeted probes only: the best config/information leak candidate and the best auth/tenant-boundary candidate.
- Spend five on triage: new, known, killed, or needs full hunt.
Never report from quickscan alone unless the proof is already complete. Promote strong leads to /hunt, /validate, or /chain.
1---2name: quickscan3description: Run a quick security scan on a target. Consults the Brain first, validates scope, runs passive recon + vuln scan in parallel.4---56ALL agents dispatched by this command MUST use in the subagent dispatch tool call.78Run a quick security assessment on: $ARGUMENTS910Workflow:111. **Brain**: `uv run python3 ../../tools/brain.py brief $ARGUMENTS` — check what we already know. Note exhausted areas.122. **Scope**: `uv run python3 ../../tools/scope_check.py $ARGUMENTS` — if out of scope, STOP.133. Launch IN PARALLEL (skip areas the brain marks EXHAUSTED):14 - `recon` agent with passive-only depth, passing brain context about known subdomains/tech15 - `config-auditor` agent for headers, CSP, CORS, TLS, cookies164. Record results: for each new finding, run `uv run python3 ../../tools/brain.py record <target> <status> <technique> <details>`175. Log session: `uv run python3 ../../tools/brain.py log "quickscan completed on $ARGUMENTS"`186. Summarize: separate NEW findings from KNOWN, recommend next steps.1920## Top-Tier Quickscan Loop2122Quickscan should answer "is there obvious money or obvious risk here in 30 minutes?"23241. Spend the first five minutes on scope, policy headers, brain, and live host sanity.252. Spend the next ten on high-signal passive recon: JS routes, exposed APIs, auth flows, cloud/storage names, source maps, security headers, and known vendor panels.263. Spend ten on two targeted probes only: the best config/information leak candidate and the best auth/tenant-boundary candidate.274. Spend five on triage: new, known, killed, or needs full hunt.2829Never report from quickscan alone unless the proof is already complete. Promote strong leads to `/hunt`, `/validate`, or `/chain`.
h-mmer