elementalsoulsCommunity·77 Agent Skills Included

Claude-BugHunter

AI-powered bug hunting and red-team toolkit for web security testing

Guides AI agents through authorized bug bounty and external red-team work across 83 security skills. Covers recon, vulnerability hunting (XSS, SQLi, SSRF, IDOR, JWT, cloud, Kubernetes), validation, and report writing for HackerOne and Bugcrowd. Eliminates guesswork with proven payloads, false-positive gates, and severity scoring drawn from 681 disclosed reports.

4,011|628

↗

npx skills add elementalsouls/Claude-BugHunter --all -g -y

All Skills in This Repository (77)

Pure Emerald Level Indicators

📦 In Repo

elementalsouls

hunt-cors

Detect CORS misconfigurations allowing credentialed cross-origin reads with browser PoCs.

hunt-xss

Map XSS surfaces across web applications for safe testing and remediation.

meme-coin-audit

Identify rug-pull risks and token-security weaknesses in meme coins on Ethereum and Solana.

hunt-csrf

Hunt CSRF vulnerabilities across modern web applications with chain-based bypass testing.

hunt-dispatch

Fingerprint target environments and load the matching /hunt skill set.

hunt-ssti

Detect and map SSTI vulnerabilities across common template engines.

report-writing

Map vulnerability findings to official HackerOne, Bugcrowd, Intigriti, and Immunefi report templates.

hunt-idor

Identify and test IDOR vulnerabilities across REST and GraphQL endpoints.

hunt-k8s

Identify Kubernetes and Docker misconfigurations enabling unauthorized access, RCE, or credential exposure.

bug-bounty

Automate end-to-end bug bounty operations from recon to reporting.

hunt-race-condition

Identify race-condition vulnerabilities in web applications using HTTP/2 single-packet techniques.

mid-engagement-ir-detection

Detect and document mid-engagement security-state changes during red-team testing.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install Claude-BugHunter?▼

Run `npx skills add elementalsouls/Claude-BugHunter --all -g -y` in your terminal to install all 83 skills globally.

What does Claude-BugHunter do?▼

It turns your AI agent into a bug-hunting assistant that knows vulnerability patterns, payloads, and validation rules for web apps, APIs, cloud, and enterprise platforms.

Which AI agents work with Claude-BugHunter?▼

The skills use the standard SKILL.md format and work with Claude Code, OpenCode, Codex CLI, Hermes Agent, and Google AntiGravity.

Can beginners use Claude-BugHunter without security experience?▼

Yes. You describe the target in plain English and the agent loads the right skill, but you must only test systems you are authorized to assess.

Does Claude-BugHunter help write bug bounty reports?▼

Yes. It includes report templates for HackerOne, Bugcrowd, Intigriti, and Immunefi, plus CVSS scoring and a validation gate to avoid rejected submissions.