application security commands

OWASP/CheatSheetSeries

Command Claude Code

Aggressively review an OWASP cheat sheet PR across security, practicality, links/sources, duplication, and language; produce a single MERGE/REQUESTCHANGES/CLOSE verdict.

elementalsouls/Claude-BugHunter

Command

Active vulnerability hunting. Two-track dispatcher — asks Red Team vs WAPT, hands off to hunt-dispatch skill and sibling commands. Usage: /hunt target.com | /hunt .target.com | /hunt targets.txt [--vuln-class X] [--source-code P] [--chrome].

elementalsouls/Claude-BugHunter

Command

Run full recon pipeline on a target — subdomain enum (Chaos API + subfinder), live host discovery (dnsx + httpx), URL crawl (katana + waybackurls + gau), gf pattern classification, nuclei scan. Outputs to recon/ / directory. Usage: /recon target.com.

elementalsouls/Claude-BugHunter

Command

Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP lock bypass, authority retention, bonding curve exploits, fake renounce, sandwich amplification). Manual 8-class grep audit (with an optional automated scanner if present). Usage: /token-scan [--chain solana].

HermeticOrmus/LibreSecOps-Claude-Code

Command

Use at the start of a bug bounty engagement after reviewing the program scope. Appropriate when.

HermeticOrmus/LibreSecOps-Claude-Code

Command

Command "azure-sec-audit" from HermeticOrmus/LibreSecOps-Claude-Code, covering /azure-sec-audit, trigger, input, process and phase 1: identity (entra id).

HermeticOrmus/LibreSecOps-Claude-Code

Command

Command "compliance-gap" from HermeticOrmus/LibreSecOps-Claude-Code, covering /compliance-gap, trigger, input, process and step 1: gap identification.