capitalone/VulnHunter

Agentic AI security tool that applies proactive, attacker-first analysis directly to source code.

About the project

VulnHunter is an AI-assisted source-code security tool that examines software like an attacker to determine which defects can actually be exploited. It is for finding vulnerabilities, tracing possible attack paths, and suggesting fixes, especially when used with Claude Code and Claude Opus.

1.1kStars on the repository
3Mods indexed here, across every type
11d agoLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown

vulnhunt-fix-verify

01

capitalone/VulnHunter

Skill Claude Code

Verify that specific findings from a prior /vulnhunt scan have been correctly addressed in a supplied code checkout. Read-only over the target repo; produces a per-finding verdict JSON.

not rated 1.1k +16 11d ago A SkillSpector: pass 47 tokens original Apache-2.0

vulnhunt

02

capitalone/VulnHunter

Skill Claude Code

Scan a codebase for exploitable security defects. Enumerates every user-controllable input, traces each forward to dangerous sinks, proves exploitability with executable tests, and proposes validated fixes.

not rated 1.1k +16 11d ago A SkillSpector: pass 42 tokens original Apache-2.0

vulnhunter-fix

03

capitalone/VulnHunter

Skill Claude CodeCodex

Automate vulnerability remediation from VulnHunter scan results using TDD. Parses VulnHunter findings, writes exploit demos proving each vulnerability, writes security tests that define correct behavior (RED), implements fixes to pass those tests (GREEN), and delivers via PR or fallback GitHub issue. Each PR includes…

not rated 1.1k +16 11d ago A SkillSpector: warn 135 tokens original Apache-2.0