Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
Claude-BugHunter is a comprehensive agent skill bundle for Claude Code that transforms the AI assistant into a bug-hunting and red-team security researcher. It provides 83 auto-loading skills, 15 slash commands, and 681 disclosed-report patterns spanning 24 vulnerability classes, along with enterprise identity and infrastructure attack matrices. The bundle covers the external attack surface including web application pentesting, bug bounty hunting, and authorized red-team engagements against internet-facing systems. Built from real HackerOne disclosure patterns and battle-tested across authorized engagements and training platforms, it implements a 6-phase non-linear workflow with built-in scope enforcement and a 7-Question validation gate.
Key Features
Use Cases
- 01Bug bounty hunting on authorized in-scope web applications and APIs with automatic vulnerability class detection
- 02External red-team engagements targeting internet-facing enterprise infrastructure (M365, Okta, VMware, SSL VPNs)
- 03Web application penetration testing with OWASP-mapped coverage and real-world exploit chain templates
- 04OAuth, GraphQL, JWT, and SaaS API security assessments using disclosed-report patterns
- 05Cloud misconfiguration audits and post-credential escalation across AWS, GCP, and Azure
- 06Security recon and OSINT including subdomain enumeration, certificate transparency, and identity-fabric mapping
Related Skills
View moresuperpowers
An agentic skills framework & software development methodology that works.
skills
Skills for Real Engineers. Straight from my .agents directory.
skills
Public repository for Agent Skills
ponytail
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
Claude-BugHunter — FAQ
What is Claude-BugHunter?+
Claude-BugHunter is a drop-in skill bundle for Claude Code that provides 83 security research skills, 15 slash commands, and 681 attack patterns curated from disclosed bug bounty reports. It covers web app pentesting, enterprise platform attacks, and external red-team workflows with automatic skill loading based on your natural language description of the target.
How do I install Claude-BugHunter?+
Inside Claude Code, use '/plugin marketplace add elementalsouls/Claude-BugHunter' then '/plugin install claude-bughunter@elementalsouls' for namespaced plugin installation. Alternatively, clone the repo and run 'bash scripts/install.sh' (macOS/Linux) or 'pwsh ./scripts/install.ps1' (Windows) to copy skills directly into ~/.claude/.
Which AI clients work with this skill bundle?+
The skills work with Claude Code, OpenCode, OpenAI Codex CLI, and Hermes Agent using the standard SKILL.md format. The slash commands and /hunt engine are Claude Code-only. The --all install flag copies skills to all compatible harnesses.
Do I need API keys or special access?+
You need authorized access or written permission to test the target systems (bug bounty in-scope assets, pentest engagement letters, or your own infrastructure). For offensive security work, enroll in Anthropic's free Cyber Verification Program to avoid runtime safeguard refusals. Burp Suite integration is optional.
Is Claude-BugHunter free to use?+
Yes, it is dual-licensed under MIT (code) and CC BY 4.0 (content/methodology). You can use it freely including commercially as long as you credit the author and use it only on authorized targets.
What does the bundle cover and what is out of scope?+
It covers external attack surfaces: web apps, APIs, SaaS, bug bounty, external red-team, cloud misconfigs, enterprise platforms (M365, Okta, vCenter, VPNs), and recon/OSINT. It deliberately excludes internal Active Directory attacks, C2 frameworks, post-exploit/lateral movement, evasion tradecraft, and binary exploitation—those require different bundles.
How do I install Claude-BugHunter?+
Open the source repository on GitHub and follow its README. Claude-BugHunter is a skill — MCP Agents Market links you directly to the official repo.
Is Claude-BugHunter free?+
Claude-BugHunter is an open-source project hosted on GitHub. Check the repository for its license and any usage requirements.