pentest

# zuvo:pentest -- Hybrid Penetration Testing White-box source-to-sink analysis combined with optional black-box runtime verification. `zuvo:pentest` is stack-aware: it selects sources, sinks, framework-safe patterns, and CodeSift recipes based on the detected project stack before dispatching any agents. Findings are built from a deterministic candidate schema, then merged with canonical-key deduplication and centralized scoring. **When to use:** Before releases, after `zuvo:security-audit` flags issues that need exploit verification, testing CMS installations, verifying security fixes. **Out of scope:** Static code quality (use `zuvo:code-audit`), broad security posture review (use `zuvo:security-audit`), API contract audit (use `zuvo:api-audit`). ## Argument Parsing | Argument | Effect | |----------|--------| | `[path]` | Limit analysis to a specific directory | | `--url <url>` | Target URL for runtime probes (enables hybrid mode) | | `--from-audit <dir>` | VERIFICATION mode -- verify PT/SEC findings from a prior audit directory | | `--cms joomla\|wordpress\|drupal` | Force-enable CMS overlay | | `--quick` | PT1 + PT3 + PT4 only (critical gates), no live probing | | `--scope <path>` | Alias for `[path]` | | `--dimensions PT1,PT2` | Audit only specified dimensions | | `--verify-live` | Enable Phase 3 exploit verification against a running app | | `--rate <N>` | Requests per second cap (default: 5) | | `--source` | Force white-box track only -- skip live probes even if `--...