TUI Slash Commands

/operator

Overview

The /operator command starts an interactive operator session where you work alongside the AI agent in real time. Unlike /pentest which runs autonomously, operator mode gives you step-by-step control over the testing process — you can approve actions, steer the agent’s focus, and intervene at any point.

Usage

$/operator

With flags:

$/operator --target https://example.com --mode auto

Alias: /o

How It Works

1

Configure Target

Provide the target URL and optional authentication details.

2

Choose Mode

The agent starts in Default mode with all tools available. Press Shift+Tab to toggle Plan mode (read-only tools only). Toggle approval on/off with Option+Shift+Tab.

3

Interactive Session

The AI agent proposes actions and you approve, reject, or redirect in real time.

Operator session — interactive prompt

Operator Modes

ModeDescription
DefaultAll tools are available; the agent can read, write, and mutate targets
PlanRead-only tools only — mutation tools (create_file, update_file, create_poc, document_vulnerability, document_asset) are excluded so the agent can only observe and plan

You can toggle between Default and Plan mode at any time during a session using Shift+Tab. The current mode is shown in the operator dashboard header.

Plan mode is useful for reviewing the agent’s strategy before allowing any mutations. Start in Plan mode to understand the agent’s approach, then switch to Default mode when you’re ready for it to take action.

Approval Control

In addition to operating mode, you can toggle whether tool calls require your approval:

  • Approval on — the agent pauses before each tool call and waits for you to approve (Y) or auto-approve (A)
  • Approval off — tool calls execute automatically

Toggle approval with Option+Shift+Tab (or Alt+Shift+Tab on Linux/Windows).

Command Flags

FlagDescription
--target <url>Target URL to test
--name <name>Session name
--mode <mode>Operator mode: plan, manual, or auto
--autopilotDisable approval gates (auto-approve all actions)
--model <model>AI model to use
--auth-url <url>Login page URL
--auth-user <user>Auth username
--auth-pass <pass>Auth password
--auth-instructionsCustom auth instructions
--hosts <h1,h2,...>Allowed hosts (comma-separated)
--ports <p1,p2,...>Allowed ports (comma-separated)
--strictEnable strict scope mode
--headers <mode>Headers mode: none, default, or custom
--header <Name:Val>Custom header (repeatable)

Keyboard Shortcuts

KeyAction
Shift+TabToggle between Default and Plan mode
Option+Shift+TabToggle approval on/off
Ctrl+VToggle verbose output
Ctrl+LToggle expanded logs
Ctrl+CAbort running agent / clear input
YApprove pending tool call
AAuto-approve all remaining tool calls
EscapeExit operator session (when idle)

When to Use /operator vs /pentest

/pentest

Autonomous mode — set a target and let the AI agent swarm run independently. Best for comprehensive, hands-off testing.

/operator

Interactive mode — guide the AI agent step by step. Best for targeted investigations, learning, or sensitive environments.

ScenarioRecommended
Full security audit/pentest
Investigating a specific feature/operator
First time testing a target/operator
CI/CD automated scanning/pentest
Sensitive production environment/operator
Broad vulnerability discovery/pentest

Example Workflow

$# Start Apex
$pensar
$
$# Launch operator session
$/operator
$
$# Or with flags for quick start
$/operator --target https://api.example.com --mode manual
$
$# In the session:
$# - The agent proposes reconnaissance actions
$# - You approve or redirect
$# - Review findings as they come in
$# - Steer toward specific areas of interest
Operator session — agent action approval

Operator Skills

You can extend operator mode with custom skills using /create-skill. Skills are reusable instruction sets that teach the agent specialized testing techniques or workflows for your specific environment.

Best Practices

Tips for Operator Mode: 1. Start in Plan mode (Shift+Tab) to review the agent’s strategy with read-only tools before allowing mutations 2. Enable approval (Option+Shift+Tab) for sensitive targets where you want to approve each action 3. Switch to Default mode once you’re comfortable with the agent’s approach 4. Create skills for repetitive testing patterns in your environment

Security Reminder: Only test systems you own or have explicit authorization to test. Unauthorized testing is illegal.

After Starting

Once you start an operator session:

  • The AI agent begins analysis based on your chosen mode
  • You interact in real time, approving or steering actions
  • Findings are reported as they’re discovered
  • The session is automatically saved and can be resumed via /sessions
/pentest

Run an autonomous pentest instead

/sessions

Browse and resume previous sessions

/models

Select AI model before starting

/providers

Configure AI provider API keys