The library

hunt-deserialization · Use for hunt insecure deserialization — java gadget chains (ysoserial), php object injection (phpggc), python pickle rce, .net binaryformatter, ruby marshal.load, jndi/log4shell. rce via deserialization is almost always critical. use when target runs java, php serialization, python pickle, .net, or ruby on rails.

baut-beweislast-benennt-bereits-excel · Use for prüft, ob die anlage eine konkrete darlegung trägt oder nur einen pauschalen anlagenverweis kaschiert; trennt tatsachenvortrag, beweisangebot und bloße hintergrundunterlage im anlagen zu schriftsätzen. liefert priorisierten output mit norm-pinpoints, risikoampel und nächstem arbeitsschritt.

hunt-dispatch · Use for skill-set loader for /hunt orchestrator. fingerprints the target, picks the right platform attack skills, and loads the red team or wapt skill set. use when /hunt has just received a mode answer (redteam or wapt + blackbox|greybox) and needs to load the appropriate skills and print the taxonomy. not for direct user invocation.

hunt-dom · Use for hunt client-side dom vulnerabilities — dom clobbering (overwrite js globals via html injection), postmessage hijacking (missing origin check), service worker abuse (intercept requests from same-origin script), css injection/exfiltration (attribute selectors → token char-by-char via oob), client-side template injection, dangerouslysetinnerhtml. grounded in named public research: gareth heyes / portswigger dom-clobbering + dom-invader, michał bentkowski dompurify clobbering bypasses, jquery htmlprefilter xss (cve-2020-11022 / cve-2020-11023), d0nut css-exfil research. use when hunting dom-xss, client-side auth bypass, or token exfiltration without server-side interaction.

rechtsabteilung-pe-closing-continuation-fund · PE teams needing audit-ready closing documentation with live German legal norm verification instead of templated checklists.

hunt-file-upload · Security auditors hunting RCE on PHP/JSP/ASPX stacks with publicly-exploitable file-processing chains.

hunt-graphql · Bug bounty hunters on platform APIs (GitHub, Shopify, Stripe tier) where GraphQL mutations interact with REST APIs.

smart-device-agb-redlinen-beschwerde · German consumer advocates needing to verify statutory deadlines and evidence requirements in smart-device complaints.

hunt-grpc · Security teams hunting microservice architecture vulns where edge-proxy auth is bypassed by reaching backend directly.

hunt-host-header · Security researchers hunting account-takeover on apps behind CDN/reverse proxy where Host is unkeyed in cache.

bug-investigation · Teams enforcing TDD discipline to prevent regressions and verify actual bug fix.

hunt-http-smuggling · Bug bounty hunters on older deployments (HAProxy <2.4, legacy F5, Citrix ADC) or AWS ALB+origin chains with H2 downgrade.

hunt-idor · Use when hunting idor on any target.

jest-generator · Use for jest-generator tasks and operations.

hunt-k8s · Testing container orchestration for auth bypass and RCE.

hunt-laravel · Testing PHP Laravel apps for CVE-2021-3129 Ignition.

design-index · Creating table of contents for design docs.

api-doc-comments · Documenting smart contract ABIs where generated docs must be client-accessible and precise.

hunt-saml · Discovering saml vulnerabilities when generic scanners miss domain-specific chains.

vibecode-brand-design · Ensuring visual consistency across branded UI components at scale.

compound-agent-doc-gardener · Orchestrating multi-step task flows with guaranteed validation and tracking.

hunt-session · Discovering session vulnerabilities when generic scanners miss domain-specific chains.

hunt-sharepoint · Discovering sharepoint vulnerabilities when generic scanners miss domain-specific chains.

cy-execute-task · Orchestrating multi-step task flows with guaranteed validation and tracking.

hunt-source-leak · Discovering source leak vulnerabilities when generic scanners miss domain-specific chains.

hunt-sqli · Discovering sqli vulnerabilities when generic scanners miss domain-specific chains.

hunt-ssrf · Discovering ssrf vulnerabilities when generic scanners miss domain-specific chains.

upgrade-deps · Implementing upgrade deps workflows that require automation.

hunt-ssti · Discovering ssti vulnerabilities when generic scanners miss domain-specific chains.

openspec-sync-specs · Implementing openspec sync specs workflows that require automation.

hunt-subdomain · Discovering subdomain vulnerabilities when generic scanners miss domain-specific chains.

hunt-tls-network · Discovering tls network vulnerabilities when generic scanners miss domain-specific chains.

hunt-websocket · Discovering websocket vulnerabilities when generic scanners miss domain-specific chains.

using-git-worktrees · When feature work requires complete isolation from current workspace without branch switching.

assets-find-built-in · When searching Unity built-in resources by name without needing GUIDs or exact paths.

hunt-xxe · When hunting XXE on XML-heavy endpoints, file parsers, or SAML flows where file-read or SSRF payoff is high.

redteam-mindset · When planning red-team engagements with structured threat modeling versus vulnerability checklist testing.

redteam-report-template · When documenting red-team findings with proper impact quantification and evidence chain.

report-writing · Ensures reports pass triage by enforcing impact-first writing and exact reproduction over theoretical claims.

triage-validation · Filters ineligible findings early (out-of-scope, known, theoretical) saving submission time and maintaining validity ratio.

ableton-lom · Enables real-time hardware parameter control through Python event listeners without boilerplate.

openspec-archive-change · Automates spec change documentation to ensure migration guides are accurate and complete.

design-postgis-tables · Enables sub-second spatial queries on millions of geometries through proper index design and CRS handling.

design-postgres-tables · Prevents common schema mistakes (N+1 queries, missing constraints) by enforcing normalization upfront.

wow-api-escape-sequences · Displays formatted character data in-game chat without breaking color/link markup.

find-hypertable-candidates · Identifying tables that would benefit from compression and time-series optimization in PostgreSQL.

assets-prefab-instantiate · Programmatically instantiating game prefabs in Unity scenes with custom transforms.

sanitize · Safely detecting and redacting PII from text files without exposing raw sensitive data.

postgres · Use this skill when you need to design or modify postgresql tables, schemas, or.

dspy-agent-framework-quick-ref · Use this skill when you need to dspy agent framework quick ref.