How are the findings presented?

The skill generates a BUGHUNT.md file that summarizes all findings, categorized by severity from Critical to Low, providing a clear roadmap for fixes.

Can Bughunt find security vulnerabilities?

Absolutely. It includes dedicated security and auth hunters designed specifically to find XSS, injection flaws, secret leaks, and permission vulnerabilities.

Does this skill work for both frontend and backend?

Yes, it dispatches specialized agents like the frontend-hunter (React/CSS) and backend-hunter (API/logic) to cover the entire full-stack architecture simultaneously.

Is it useful for TypeScript projects?

Yes, it features a specialized type-safety hunter that specifically looks for improper use of 'any', type mismatches, and potential runtime type errors.

What is the 'Iron Law' in the Bughunt skill?

The Iron Law states 'When you think you're done, you're not.' It forces the agents to perform multiple passes, ensuring that deep-seated bugs often missed by a single scan are identified.

Bug Hunt

Name: Bug Hunt
Author: wilrf

bywilrf

Security & Testing

Performs deep, multi-layered codebase audits using parallel specialized agents to identify bugs, security vulnerabilities, and performance bottlenecks.

About

The Bughunt skill transforms Claude Code into a comprehensive quality assurance suite by deploying specialized 'hunters' across every layer of your application. Following the 'Iron Law' of bug hunting—which mandates multiple passes to catch hidden issues—the skill coordinates parallel agents focused on frontend, backend, security, type safety, and more. It is particularly valuable before major releases or after significant refactors, providing a centralized BUGHUNT.md report that prioritizes critical issues and ensures your code meets production-grade standards.

Key Features

Parallel execution of specialized agents for frontend, backend, security, and performance.
Deep context analysis for specialized frameworks like React, TypeScript, and SQL.
Automated generation of a prioritized BUGHUNT.md report with severity rankings.
Comprehensive auditing across 13+ domains including database, auth, and environment config.
0 GitHub stars
Rigorous three-pass 'Iron Law' methodology to uncover hidden logic and edge-case errors.

Use Cases

Performing a final quality and security audit before a major production release.
Conducting deep-dive security reviews for authentication and API endpoints.
Identifying technical debt and logic flaws after a significant codebase refactor.

About

Key Features

Parallel execution of specialized agents for frontend, backend, security, and performance.
Deep context analysis for specialized frameworks like React, TypeScript, and SQL.
Automated generation of a prioritized BUGHUNT.md report with severity rankings.
Comprehensive auditing across 13+ domains including database, auth, and environment config.
0 GitHub stars
Rigorous three-pass 'Iron Law' methodology to uncover hidden logic and edge-case errors.

Use Cases

Performing a final quality and security audit before a major production release.
Conducting deep-dive security reviews for authentication and API endpoints.
Identifying technical debt and logic flaws after a significant codebase refactor.