By su1ph3r
Multi-agent bug hunting plugin that launches parallel specialist agents to find bugs across categories, deduplicates and scores findings, runs regression guard analysis, and produces prioritized reports
Use this agent to hunt for API contract violations: type mismatches between caller and callee, wrong argument order, schema drift between client and server, incorrect return value handling, and interface/protocol violations. Launch via Task tool with files to analyze. Examples: <example> assistant: "I'll launch the api-contract-checker to verify function signatures and API schemas match their usage." <Task tool invocation to launch api-contract-checker agent> </example>
Use this agent to hunt for edge case bugs: null/undefined paths, empty collections, boundary values, integer overflow, Unicode handling issues, and unexpected input types. Launch via Task tool with files to analyze. Examples: <example> assistant: "I'll launch the edge-case-finder agent to check for unhandled edge cases." <Task tool invocation to launch edge-case-finder agent> </example>
Use this agent to hunt for error handling bugs: silent failures, swallowed exceptions, empty catch blocks, overly broad catches, missing error propagation, and fallback logic that masks real problems. Launch via Task tool with files to analyze. Examples: <example> assistant: "I'll launch the error-handler agent to check for silent failures and inadequate error handling." <Task tool invocation to launch error-handler agent> </example>
Use this agent to hunt for logic bugs: off-by-one errors, wrong comparisons, inverted conditions, unreachable code, incorrect operator precedence, and flawed control flow. Launch this agent via the Task tool with a prompt specifying the files to analyze. The agent returns findings in a standardized format with severity and confidence scores. Examples: <example> Context: Reviewing recently changed files for logic errors. assistant: "I'll launch the logic-hunter agent to check for logic bugs in the changed files." <Task tool invocation to launch logic-hunter agent> </example>
Use this agent to hunt for concurrency bugs: race conditions on shared mutable state, TOCTOU vulnerabilities, deadlocks, async/await pitfalls, missing synchronization, and thread-safety violations. Launch via Task tool with files to analyze. Examples: <example> assistant: "I'll launch the race-condition-detector to check for concurrency issues in the async code." <Task tool invocation to launch race-condition-detector agent> </example>
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Custom Claude Code plugin marketplace.
Multi-agent bug hunting for Claude Code. Launches parallel specialist agents across 8 bug categories, deduplicates and scores findings, runs a regression guard, and produces a prioritized report.
Usage:
/bug-hunter:bughunt # Diff-based scan, top 5 agents
/bug-hunter:bughunt --full # Full codebase, top 5 agents
/bug-hunter:bughunt --thorough # All 8 agents, diff-based
/bug-hunter:bughunt --security # Deep security audit only
/bug-hunter:bughunt src/auth/ # Specific path
/bug-hunter:bughunt --thorough --full # All agents, full codebase
Agents:
| Agent | Hunts For |
|---|---|
logic-hunter | Off-by-ones, wrong comparisons, inverted conditions, unreachable code |
error-handler | Silent failures, swallowed exceptions, empty catches, fallback masking |
edge-case-finder | Null paths, empty collections, boundary values, overflow, Unicode |
security-scanner | Injection, auth bypass, path traversal, SSRF, hardcoded secrets |
race-condition-detector | Shared mutable state, TOCTOU, deadlocks, async pitfalls |
resource-leak-hunter | Unclosed files/connections, missing cleanup, thread leaks |
api-contract-checker | Type mismatches, wrong arg order, schema drift, return value misuse |
state-bug-finder | Stale state, missing UI updates, cache invalidation, state machine bugs |
regression-guard | Test coverage gaps, downstream consumers, public API breaks, fix risk |
Add this marketplace to Claude Code:
/plugins marketplace add su1ph3r/claude-plugins
Then install a plugin:
/plugins install bug-hunter
npx claudepluginhub su1ph3r/claude-plugins --plugin bug-hunterEnd-to-end bug bounty hunting pipeline that orchestrates 8 security tools (Reticustos, Indago, BypassBurrito, Mobilicustos, Nubicustos, Cepheus, Vinculum, Ariadne) through agent-driven phases — from recon to attack path synthesis
Proactive bug finding with static and semantic analysis
Systematically debug issues with step-by-step troubleshooting approaches.
Reviews code for real bugs: off-by-ones, null derefs, race conditions, swallowed errors. Skips style nitpicks.
Systematically debug issues with step-by-step troubleshooting approaches.
A plugin to find bugs in a codebase using property-based testing
Debugging specialist for errors, test failures, and unexpected behavior. Use proactively when encountering any issues.