H-mmer/pentest-agents

github
github Python analyzed 41d49b6

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

maintainer
H-mmer
licence
—
first seen
2026-06-01
last seen
2026-06-12
releases · 30d
0
github stars
1,007 reported
short id

H-mmer/pentest-agents is an MCP server distributed on github, maintained by H-mmer, tracked here since June 2026. It has shipped 0 releases and exposes 11 tools. Tools include draft_report, get_program_policy, get_program_scope, get_writeup, list_platforms, search_hacktivity, and 5 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — hidden prompt content — each a pattern worth a human look rather than a finding of fault.

Its 11 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools

11
  • draft_report
  • get_program_policy
  • get_program_scope
  • get_writeup
  • list_platforms
  • search_hacktivity
  • search_payloads
  • search_techniques
  • search_writeups
  • submit_report
  • sync_program

release cadence · 90d

0 releases

No releases yet.

recent releases

last 0

No releases yet.