Skill.md files: teach Claude once, not every chat.

• SKILL.md

---
name: hunt-cicd
description: Hunt CI/CD pipeline vulnerabilities
---

• SKILL.md

---
name: hunt-cloud-misconfig
description: Hunt cloud / infrastructure misconfigurations.
---

• SKILL.md

---
name: hunt-deserialization
description: Hunt Insecure Deserialization
---

• SKILL.md

---
name: hunt-dispatch
description: Skill-set loader for /hunt orchestrator.
---

• SKILL.md

---
name: hunt-exceptional-conditions
description: Hunt mishandling of exceptional conditions
---

• SKILL.md

---
name: hunt-fintech-graphql
description: Hunt fintech-specific GraphQL vulnerabilities
---

• SKILL.md

---
name: hunt-graphql
description: Hunting skill for graphql vulnerabilities.
---

• SKILL.md

---
name: hunt-grpc
description: Hunt gRPC vulnerabilities
---

• SKILL.md

---
name: hunt-http-smuggling
description: Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE).
---

• SKILL.md

---
name: hunt-jwt-crypto
description: Hunt JWT cryptographic failures
---

• SKILL.md

---
name: hunt-k8s
description: Hunt Kubernetes & Docker
---

• SKILL.md

---
name: hunt-laravel
description: Hunt Laravel specific vulnerabilities
---

• SKILL.md

---
name: hunt-ldap
description: Hunt LDAP Injection and XPath Injection
---

• SKILL.md

---
name: hunt-lfi
description: Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal
---

• SKILL.md

---
name: hunt-mfa-bypass
description: Hunt MFA / 2FA bypass
---

• SKILL.md

---
name: hunt-nodejs
description: Hunt Node.js specific vulnerabilities
---

• SKILL.md

---
name: hunt-nosqli
description: Hunt NoSQL Injection
---

• SKILL.md

---
name: hunt-ntlm-info
description: Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.
---

• SKILL.md

---
name: hunt-oauth
description: Hunting skill for oauth vulnerabilities. Built from 19 public bug bounty reports. Use when hunting oauth on any target.
---

• SKILL.md

---
name: hunt-race-condition
description: Hunting skill for race condition vulnerabilities.
---

• SKILL.md

---
name: hunt-rag-vector
description: Hunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and Embedding Weaknesses)
---

• SKILL.md

---
name: hunt-session
description: Hunt Session Management vulnerabilities
---

• SKILL.md

---
name: hunt-shadow-api
description: Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management)
---

• SKILL.md

---
name: hunt-spa-api
description: Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
---