bug-hunt

Identify real code defects with concrete witnesses and structured bug reports.

1|Updated Apr 8, 2026
One-click install
npx skills add https://github.com/maxenko/claude-skills --skill bug-hunt-maxenko
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bug-hunt
Source: https://github.com/maxenko/claude-skills/tree/main/bug-hunt
Command: npx skills add https://github.com/maxenko/claude-skills --skill bug-hunt-maxenko

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Finds real bugs in code — defects you can prove with a specific input, state, or interleaving that produces observable harm. Bugs only. Style, naming, docs, and refactoring belong in code-scrutiny and refactor-pro. (ultrathink)

The methodology is grounded in empirical bug-finding research, cited inline where it earns a specific decision — not as a reading list.

The skill guides users through a rigorous, lens-based bug-hunting process that prioritizes verifiable impact over superficial code quality improvements.

Core Features & Use Cases

  • Rotating lenses (null/boundary, error-path, concurrency, taint, inconsistency, invariants) surface real bugs with concrete witnesses.
  • Witness-based bug reports include a specific input/state sequence, observable harm, and a clear reachability path.
  • Structured reports enable triage, replication, and remediation across single-file to large repos.

Quick Start

Provide the target code or stack trace and I will begin the bug hunt with six-lens analysis

Frequently Asked Questions about bug-hunt

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find real bugs in code with concrete test cases instead of style issues?

Find real bugs with concrete witnesses by providing your target code or stack trace for a six-lens analysis. The process generates standardized bug reports containing specific inputs, observable harm, reachability paths, and fix sketches, strictly excluding style, naming, and refactoring concerns.

What is witness-based bug reporting and how does it prove a defect?

Witness-based bug reporting proves a defect by producing a specific input, state, or interleaving that causes observable harm. Each report includes a concrete witness, a reachability path demonstrating how the defect manifests, and a fix sketch to enable replication and remediation.

How do I identify concurrency and taint bugs across an entire repository?

Identify concurrency and taint bugs by applying rotating analytical lenses to individual files, commits, or entire repositories. The lens-based methodology systematically surfaces real defects across null/boundary, error-path, concurrency, taint, inconsistency, and invariant categories.

What's the best way to triage code defects that only appear under specific interleavings?

Triage code defects appearing under specific interleavings by using structured reporting formats that capture explicit witnesses, observable harm, and reachability paths. This methodology isolates real concurrency bugs from superficial issues to enable targeted remediation.

Can I use this approach to find invariant violations in a single file?

Yes, you can find invariant violations in a single file by providing the target code for analysis. The lens-based workflow scales from individual files to large repositories, applying invariant and inconsistency checks to produce verifiable defect reports.

When should I not use this bug hunting methodology for code review?

Do not use this methodology for code review tasks involving style, naming, documentation, or refactoring. This approach strictly targets verifiable defects and observable harm, directing structural improvements to separate code scrutiny workflows.