scan-full

Orchestrate end-to-end security scans across phases FASE 0-21 on a target URL.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/ricardoo022/PentestAI-with-claude-code --skill scan-full
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scan-full
Source: https://github.com/ricardoo022/PentestAI-with-claude-code/tree/main/.claude/skills/scan-full
Command: npx skills add https://github.com/ricardoo022/PentestAI-with-claude-code --skill scan-full

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Aggregates and orchestrates a complete end-to-end security assessment across all phases (FASE 0-21) for a target URL, delivering a structured, consolidated view of findings.

Core Features & Use Cases

  • End-to-end orchestration: Runs multiple scan phases in optimized waves, reducing time to results.
  • Scoped enrichment: Triggers optional deep enrichment via /scan-deep to validate findings and produce a final JSON report.
  • Use Case: Ideal for teams that want a repeatable, production-grade security assessment workflow for new or existing web applications.

Quick Start

Invoke /scan-full with a target URL and client name to run all phases and generate the final deep-scan JSON.

Frequently Asked Questions about scan-full

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I orchestrate an end-to-end security scan for a web application?

To orchestrate a full security scan, you invoke the tool with a target URL and client name to run all phases and generate a final deep-scan JSON report. It coordinates parallel waves and ownership verification across multiple phases.

What is the best way to automate repeatable security testing for new web apps?

Automated security testing for new web apps is achieved by orchestrating a complete end-to-end security assessment across all phases. This provides a repeatable, production-grade workflow that coordinates parallel scanning waves and deep enrichment.

Can I generate a consolidated JSON report from multiple security scan phases?

Yes, you can generate a consolidated deep-scan JSON report by running all scan phases and triggering optional deep enrichment. This aggregates findings from all phases into a structured, final output for the target URL.

Does the full security scan validate findings automatically during the process?

Yes, the full security scan validates findings automatically by triggering optional deep enrichment via a specialized scan-deep process. This scoped enrichment validates initial findings to produce the final deep-scan JSON report.

What do I need to run a comprehensive web application security assessment?

To run a comprehensive web application security assessment, you need a target URL and a client name. The orchestration tool then coordinates all scan phases, ownership verification, and report generation automatically.

Are there limitations to running parallel waves during a security scan?

Running parallel waves during a security scan is optimized to reduce time to results, but the scope is limited to the target URL provided. It orchestrates phases efficiently but requires proper ownership verification before executing deep enrichment.