claude-bughunter is a drop-in Claude Code skill bundle that makes Claude behave like a senior bug-hunting researcher, with 83 auto-loaded skills covering 24 vulnerability classes derived from 681 disclosed reports, 15 slash commands, and an engagement scaffolder. It also includes enterprise identity and infrastructure attack matrices.
Project overview
The bundle turns fragmented bug-hunting knowledge — re-read bookmarked reports and generic security prompts — into 83 auto-loaded skills spanning 24 vulnerability classes from 681 disclosed reports, and its plain Agent Skills format installs across five agent harnesses with a single installer.
Project type
AI Agent · Prompt Engineering
Deployment
Refer to project documentation
License
MIT
Best for
Security researchers who want bug-hunting Claude setups that scale beyond a single generic security prompt or re-read bookmarked reports.
Bug hunters targeting authorized bug-bounty programs and pentest engagements who need VRT-aware reports for platforms such as HackerOne, Bugcrowd, Intigriti, and Immunefi.
Key capabilities
Slash commands such as /hunt, /recon, /report drive the workflow in Claude Code.
A deterministic engagement engine (engine/) maps a target's attack surface and routes findings to the handling skill, plus hunt engagement-folder scaffolding.
The installer copies the knowledge-layer skills to Claude Code, OpenCode, OpenAI Codex CLI, Hermes Agent, and Google AntiGravity skill directories; slash commands stay Claude-Code-only.
Optional Burp Suite MCP server wiring via the --burp-mcp install flag.
Planned HackerOne MCP integration; currently only Burp MCP is wired in.
Limitations and risks
Slash commands and the /hunt engine stay Claude-Code-only by design; only the knowledge layer ports to other harnesses.
Skills must only be used against assets you own or for which you have written authorization; misuse is excluded by design.
Anthropic runtime safeguards can block offensive-security requests by default, causing refusals even for authorized in-scope work.
Getting started
In Claude Code: run /plugin marketplace add elementalsouls/Claude-BugHunter, then /plugin install claude-bughunter@elementalsouls, and describe what you're testing in plain English.
Evidence and sources
GitHub project description: A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, p…
README: A self-contained Claude skill bundle for bug hunting and external red-team work · **83 skills** · 15 slash commands · **681 disclosed-report patterns** (433 now individually cited…
README: `claude-bughunter` is a drop-in skill bundle for the [Claude Code skills system](https://docs.claude.com/en/docs/claude-code/skills). Install once and Claude Code stops being a ch…
README: **Option A — install as a Claude Code plugin (recommended).** From inside Claude Code: ```text /plugin marketplace add elementalsouls/Claude-BugHunter /plugin install claude-bughu…
README: That's it. Open Claude Code and describe what you're testing in plain English — the right skill loads automatically, no invocation by name