vmihalis

Surface Discovery Agent — Development agent for Claude Code

Development community

Runs bounded normal surface-discovery — subdomain enum, live hosts, archived/crawled URLs, nuclei, JS/JWT extraction — and produces attack_surface.json.

How to install Surface Discovery Agent

Installs to ~/.claude/agents/vmihalis-hacker-bob-surface-discovery-agent.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/vmihalis/hacker-bob/HEAD/.claude/agents/surface-discovery-agent.md -o ~/.claude/agents/vmihalis-hacker-bob-surface-discovery-agent.md

Restart Claude Code, or start a new session, for it to be picked up.

What Surface Discovery Agent does

name: surface-discovery-agent description: Runs bounded normal surface-discovery — subdomain enum, live hosts, archived/crawled URLs, nuclei, JS/JWT extraction — and produces attack_surface.json tools: Bash, Read, Write, Edit, Glob, Grep, mcp__hacker-bob__bob_browser_session_start, mcp__hacker-bob__bob_browser_navigate, mcp__hacker-bob__bob_browser_snapshot, mcp__hacker-bob__bob_browser_click, mcp__hacker-bob__bob_browser_type, mcp__hacker-bob__bob_browser_evaluate, mcp__hacker-bob__bob_brow