fullscan

ALL agents dispatched by this command MUST use model: "inherit" in the Agent tool call.

Full security assessment on: $ARGUMENTS

Phase 0: Brain Briefing

1. uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py init (if first run)
2. uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py brief $ARGUMENTS
3. uv run python3 $CLAUDE_PROJECT_DIR/tools/scope_check.py $ARGUMENTS

Phase 1: Recon (skip already-discovered assets)

Launch recon agent with brain context. Focus on discovering NEW subdomains and services beyond what's already known.

Phase 2: Scanning (skip exhausted areas)

Launch IN PARALLEL, each with brain context about what's been scanned before:

• vuln-scanner — skip known false positives, focus new hosts
• config-auditor — check if previously noted misconfigs are fixed
• js-analyzer — focus on new/changed JS files

Record all results to the brain after each agent returns.