Vulnhunter

This is for hunting security vulnerabilities and their variants across your codebase. It combines two approaches: finding "sharp edges" like dangerous APIs, insecure defaults, and footgun patterns (think strcpy, pickle.loads, or hardcoded crypto), then doing variant analysis to find similar bugs once you've spotted one. You get checklists for common vulnerability classes, language-specific gotchas for JavaScript, Python, Rust, and Solidity, plus grep patterns and Semgrep examples to systematically search for problems. Useful during security audits, pre-audit reconnaissance, or when you need to check if that SQL injection you found has cousins elsewhere. The approach is clearly inspired by Trail of Bits methodology, and it shows in the structured hunting process.

skills.sh installs: 272
GitHub stars: 130
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add sendaifun/skills --skill vulnhunter --agent claude-code

Installs into .claude/skills of the current project.

Files

VulnHunter - Security Vulnerability Detection & Analysis

A comprehensive security audit skill for identifying dangerous APIs, footgun patterns, error-prone configurations, and hunting for vulnerability variants across codebases. Inspired by Trail of Bits' sharp-edges and variant-analysis methodologies.

Overview

VulnHunter combines two powerful security analysis techniques:

Sharp Edges Detection - Identify error-prone APIs, dangerous defaults, and footgun designs
Variant Analysis - Find similar vulnerabilities across codebases using pattern-based analysis