Scope Management

Manage the target scope file at .pentest/scope.json. All pentesting commands validate targets against this file via the PreToolUse hook.

Operations

Parse the first argument from $ARGUMENTS to determine the operation. Remaining arguments are the target(s).

Display the current scope. This is the default when no operation is specified.

cat .pentest/scope.json 2>/dev/null || echo "No scope file found. Run /scope init to create one."

Always confirm with the user first before modifying the scope file.

Example confirmation: "Add [target] to the scope in .pentest/scope.json? (yes/no)"

Only proceed after the user confirms. Then add the target:

jq --arg t "TARGET" '.targets += [$t] | .targets |= unique' .pentest/scope.json > .pentest/scope.tmp && mv .pentest/scope.tmp .pentest/scope.json

Show the updated scope after adding.

Always confirm with the user first before modifying the scope file.

Example confirmation: "Remove [target] from the scope in .pentest/scope.json? (yes/no)"

Only proceed after the user confirms. Then remove the target:

jq --arg t "TARGET" '.targets -= [$t]' .pentest/scope.json > .pentest/scope.tmp && mv .pentest/scope.tmp .pentest/scope.json

Show the updated scope after removing.

Create the scope file with safe default targets:

mkdir -p .pentest && echo '{"targets":["localhost","127.0.0.1"]}' > .pentest/scope.json

Show the created scope file and explain that targets must be in this file before pentesting commands will execute.

Always confirm with the user first before modifying the scope file.

Example confirmation: "Clear all targets from .pentest/scope.json? This will block all pentesting commands until new targets are added. (yes/no)"

Only proceed after the user confirms. Then reset the scope:

echo '{"targets":[]}' > .pentest/scope.json

Show the cleared scope and remind the user to add targets before running pentesting commands.

Always confirm with the user before modifying scope (add, remove, clear)
Default safe targets: localhost, 127.0.0.1
Lab targets to suggest adding: localhost (covers all lab ports on 8080, 3030, 8888, 8180)
The .pentest/ directory is gitignored
Scope file format: {"targets": ["target1", "target2"]}