bug-hunter

Audit code for vulnerabilities and bugs using a multi-agent pipeline.

479|56|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/codexstar69/bug-hunter --skill bug-hunter-codexstar69
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bug-hunter
Source: https://github.com/codexstar69/bug-hunter/tree/main
Command: npx skills add https://github.com/codexstar69/bug-hunter --skill bug-hunter-codexstar69

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) and assets (resource) and skills (resource) components.

What problem does it solve?

This Skill automates the process of finding and fixing bugs in code, eliminating the common AI code review pitfalls of false positives and regressive fixes.

Core Features & Use Cases

  • Adversarial Pipeline: Hunter, Skeptic, and Referee agents debate code findings to ensure accuracy.
  • Safe Auto-Fix: Implements fixes with git branching, worktree isolation, test verification, and automatic rollback.
  • Use Case: Run Bug Hunter on your codebase to automatically identify and patch security vulnerabilities, logic errors, and runtime bugs, ensuring code quality and security without manual oversight.

Quick Start

Use the bug hunter skill to scan your entire project for bugs.

Frequently Asked Questions about bug-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does adversarial AI code review prevent false positives and regressive fixes?

Adversarial AI code review prevents false positives by using a multi-agent pipeline where Hunter, Skeptic, and Referee agents debate findings. This adversarial verification ensures only accurate security vulnerabilities, logic errors, and runtime bugs receive safe, verified auto-fixes.

Can I automatically patch security vulnerabilities and logic errors in my codebase?

Yes, you can automatically patch security vulnerabilities and logic errors in your codebase. The pipeline applies safe auto-fixes using git branching, worktree isolation, and test verification, with automatic rollback to ensure code quality and security.

Do I need Node.js 18 to run automated security audits and bug hunting?

Yes, you need Node.js 18 or higher to run automated security audits and bug hunting. Optionally, you can integrate Context Hub to enable documentation verification during the adversarial code auditing and bug fixing pipeline.

What is the best way to ensure auto-fixes do not break existing tests during security audits?

The best way to ensure auto-fixes do not break tests is using worktree isolation and test verification. The pipeline applies fixes in isolated git branches and automatically rolls back any changes that fail test verification or cause runtime bugs.

How do I scan an entire project for runtime bugs and security vulnerabilities without manual oversight?

You can scan an entire project for runtime bugs and security vulnerabilities without manual oversight by running the automated adversarial pipeline. It identifies code flaws through multi-agent debates and safely patches them using isolated git branching.

Why do standard automated code review tools produce false positives when finding bugs?

Standard automated code review tools produce false positives because they lack adversarial verification. The multi-agent pipeline solves this by forcing Hunter, Skeptic, and Referee agents to debate code findings before applying any safe, verified auto-fixes.