hunt-http-smuggling

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By elementalsouls/Claude-BugHunter (GitHub) · security · 5,515 stars · scanned at commit d5dcc53

Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree on where one request ends and the next begins (Content-Length vs Transfer-Encoding header parsing inconsistency). CL.TE: front-end uses CL, back uses TE → smuggle by sending TE: chunked but with body that fits CL count. TE.CL: opposite. H2.CL: HTTP/2 downgrade, smuggle CL into HTTP/1.1 back-end. Detection tools: Burp HTTP Request Smuggler extension, smuggler.py, h2csmuggler. Confirm: ti…

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: target

This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.

Found in 4 places.

skills/hunt-http-smuggling/SKILL.md, line 60curl -sI https://target/ | grep -i "Server:"
docs/verification/phase2h-smuggling-cachepoison.md, line 42curl -i -H "X-Forwarded-Host: attacker.evil" "$URL"
docs/verification/phase2h-smuggling-cachepoison.md, line 60curl -i "$URL"

Show 1 more

docs/verification/phase2h-smuggling-cachepoison.md, line 138curl -sI https://target/ | grep -i "Server:"

Runs commands on your computer

The author does not mention this. Expected for a security skill.

Found in 1 place.

skills/hunt-http-smuggling/SKILL.md, line 60curl -sI https://target/ | grep -i "Server:"

Changes files outside its own folder

The author does not mention this.

Found in 1 place.

docs/verification/phase2h-smuggling-cachepoison.md, line 12mkdir -p ~/phase2h-lab && cd ~/phase2h-lab

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'hunt-http-smuggling' ] || [ -L ~/.agents/skills/'hunt-http-smuggling' ]; then echo 'A skill folder named hunt-http-smuggling already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/elementalsouls/Claude-BugHunter' "$d" && git -C "$d" checkout --quiet 'd5dcc5347675ed431488e0a0e46749e4918aa194' -- 'skills/hunt-http-smuggling' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/hunt-http-smuggling' ~/.agents/skills/'hunt-http-smuggling' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'hunt-http-smuggling' ~/.claude/skills/'hunt-http-smuggling' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for elementalsouls/Claude-BugHunter shows the score of its lowest-scoring skill.

SkillTrust badge for elementalsouls/Claude-BugHunter

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/elementalsouls/Claude-BugHunter.svg)](https://zalavijaysinh.github.io/skilltrust/repos/elementalsouls/Claude-BugHunter/)

Score history

Date	Version	Score
2026-11-10	`d5dcc53`	82
2026-11-08	`42a3ab1`	82
2026-11-06	`3e71af0`	82