bug-hunter

67 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By CarlosCaPe/octorato (GitHub) · coding · 18 stars · scanned at commit cfaeb00

Adversarial bug hunting with a sequential-first pipeline (Recon, Hunter, Skeptic, Referee) that can optionally use safe read-only parallel triage. Finds, verifies, and auto-fixes real bugs by default (with --scan-only opt-out) using checkpointed verification and resume state for large codebases. Use this skill whenever the user wants bug finding, security audits, regression checks, or code review focused on runtime behavior.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 77 places.

skills/bug-hunter/CHANGELOG.md, line 11- **CRITICAL**: `dep-scan.cjs` — eliminated all `bash -c` shell execution. Audit commands and reachability search now use `spawnSync` with explicit argv arrays,
skills/bug-hunter/CHANGELOG.md, line 32- Login shell overhead eliminated — worker dispatch changed from `bash -lc` to `bash -c` in `run-bug-hunter.cjs` and `dep-scan.cjs`
skills/bug-hunter/SKILL.md, line 107node "$SKILL_DIR/scripts/pr-scope.cjs" resolve "<selector>" --repo-root "$PWD" [--base <base-branch>]

Show 17 more

skills/bug-hunter/SKILL.md, line 195mkdir -p .bug-hunter/payloads .bug-hunter/domains
skills/bug-hunter/SKILL.md, line 219chub --help 2>/dev/null && chub update 2>/dev/null
skills/bug-hunter/SKILL.md, line 308node "$SKILL_DIR/scripts/triage.cjs" scan "<TARGET_PATH>" --output .bug-hunter/triage.json
skills/bug-hunter/SKILL.md, line 376node "$SKILL_DIR/scripts/dep-scan.cjs" --target "<TARGET_PATH>" --output .bug-hunter/dep-findings.json
skills/bug-hunter/SKILL.md, line 490node "$SKILL_DIR/scripts/experiment-loop.cjs" init \
skills/bug-hunter/SKILL.md, line 500node "$SKILL_DIR/scripts/experiment-loop.cjs" check-continue \
skills/bug-hunter/SKILL.md, line 678node "$SKILL_DIR/scripts/render-report.cjs" report ".bug-hunter/findings.json" ".bug-hunter/referee.json" > ".bug-hunter/report.md"
skills/bug-hunter/bin/bug-hunter, line 16const { execFileSync } = require('child_process');
skills/bug-hunter/bin/bug-hunter, line 133const nodeVersion = execFileSync('node', ['--version'], { encoding: 'utf8' }).trim();
skills/bug-hunter/bin/bug-hunter, line 142execFileSync('chub', ['--help'], { stdio: 'ignore', timeout: 3000 });
skills/bug-hunter/bin/bug-hunter, line 164const gitVersion = execFileSync('git', ['--version'], { encoding: 'utf8' }).trim();
skills/bug-hunter/prompts/examples/hunter-examples.md, line 71os.system(command)
skills/bug-hunter/prompts/examples/hunter-examples.md, line 74**Analysis:** `filename` → f-string → `os.system()`. Shell metacharacters in filename = RCE.
skills/bug-hunter/prompts/examples/hunter-examples.md, line 84- **Claim:** Command injection via unsanitized filename in os.system()
skills/bug-hunter/prompts/examples/hunter-examples.md, line 85- **Evidence:** `os.system(f"convert {filename} -resize {width}x{height} resized_{filename}")` (line 17)
skills/bug-hunter/scripts/dep-scan.cjs, line 13const { spawnSync } = require('child_process');
skills/bug-hunter/scripts/dep-scan.cjs, line 35const result = spawnSync(bin, args, {

and 57 more places

Downloads and installs other software

The author does not mention this.

Found in 14 places.

skills/bug-hunter/CHANGELOG.md, line 196- Install via: `npm install -g @codexstar/bug-hunter && bug-hunter install`
skills/bug-hunter/CHANGELOG.md, line 197- Compatible with `npx skills add codexstar69/bug-hunter` for Cursor, Windsurf, Copilot, Kiro, and Claude Code
skills/bug-hunter/CHANGELOG.md, line 223- Requires `@aisuite/chub` installed globally (`npm install -g @aisuite/chub`) - optional but recommended; pipeline works without it via Context7 fallback

Show 11 more

skills/bug-hunter/CONTRIBUTING.md, line 26npm install -g @aisuite/chub
skills/bug-hunter/README.md, line 35npx skills add codexstar69/bug-hunter
skills/bug-hunter/README.md, line 41npm install -g @codexstar/bug-hunter
skills/bug-hunter/SKILL.md, line 228npm install -g @aisuite/chub
skills/bug-hunter/bin/bug-hunter, line 146console.log(' Install for better doc verification: npm install -g @aisuite/chub');
skills/bug-hunter/bin/bug-hunter, line 198console.log(` Install: npx skills add codexstar69/bug-hunter`);
skills/bug-hunter/bin/bug-hunter, line 199console.log(` Or: npm install -g @codexstar/bug-hunter && bug-hunter install`);
skills/bug-hunter/llms-full.txt, line 180npm install -g @codexstar/bug-hunter && bug-hunter install
skills/bug-hunter/llms.txt, line 55npm install -g @codexstar/bug-hunter && bug-hunter install
skills/bug-hunter/llms.txt, line 58npx skills add codexstar69/bug-hunter
skills/bug-hunter/llms.txt, line 64npm install -g @aisuite/chub

Changes files outside its own folder

The author does not mention this.

Found in 2 places.

skills/bug-hunter/bin/bug-hunter, line 50bug-hunter install --path ~/my-skills/bug-hunter
skills/bug-hunter/scripts/tests/run-bug-hunter.test.cjs, line 821fs.writeFileSync(workerPath, '#!/usr/bin/env node\nprocess.exit(1);\n', 'utf8');

Connects to the internet

The author does not mention this.

Found in 2 places.

skills/bug-hunter/scripts/context7-api.cjs, line 53const req = https.get(url, options, (res) => {
skills/bug-hunter/scripts/doc-lookup.cjs, line 47const req = https.get(url, { headers }, (res) => {

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'bug-hunter' ] || [ -L ~/.agents/skills/'bug-hunter' ]; then echo 'A skill folder named bug-hunter already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/CarlosCaPe/octorato' "$d" && git -C "$d" checkout --quiet 'cfaeb008b4e13a38256d7358ed654f082122b122' -- 'skills/bug-hunter' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/bug-hunter' ~/.agents/skills/'bug-hunter' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'bug-hunter' ~/.claude/skills/'bug-hunter' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for CarlosCaPe/octorato shows the score of its lowest-scoring skill.

SkillTrust badge for CarlosCaPe/octorato

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/CarlosCaPe/octorato.svg)](https://zalavijaysinh.github.io/skilltrust/repos/CarlosCaPe/octorato/)

Score history

Date	Version	Score
2026-11-10	`cfaeb00`	67