bug-hunt

Bug Hunt - Adversarial Bug Finding

Run a 3-agent adversarial bug hunt on your codebase. Each agent runs in isolation.

Usage

/bug-hunt              # Scan entire project
/bug-hunt src/         # Scan specific directory
/bug-hunt lib/auth.ts  # Scan specific file
/bug-hunt -b feature-xyz              # Scan files changed in feature-xyz vs main
/bug-hunt -b feature-xyz --base dev   # Scan files changed in feature-xyz vs dev

Target

The raw arguments are: $ARGUMENTS

Parse the arguments as follows:

1. If arguments contain -b <branch>: this is a branch diff mode.
   • Extract the branch name after -b.
   • If --base <base-branch> is also present, use that as the base branch. Otherwise default to main.
   • Run git diff --name-only <base>...<branch> using the Bash tool to get the list of changed files.
   • If the command fails (e.g. branch not found), report the error to the user and stop.
   • If no files changed, tell the user there are no changes to scan and stop.
   • The scan target is the list of changed files (scan their full contents, not just the diff).
2. If arguments do NOT contain -b: treat the entire argument string as a path target (file or directory). If empty, scan the current working directory.

Execution Steps

You MUST follow these steps in exact order. Each agent runs as a separate subagent via the Agent tool to ensure context isolation.

Step 1: Parse arguments and resolve target

Follow the rules in the Target section above to determine the scan target. If in branch diff mode, run the git diff command now and collect the file list.

Step 2: Read the prompt files

Read these files using the skill directory variable:

• ${CLAUDE_SKILL_DIR}/prompts/hunter.md
• ${CLAUDE_SKILL_DIR}/prompts/skeptic.md
• ${CLAUDE_SKILL_DIR}/prompts/referee.md

Step 3: Run the Hunter Agent

Launch a general-purpose subagent with the hunter prompt. Include the scan target in the agent's task. If in branch diff mode, pass the explicit file list so the Hunter only scans those files (full contents). The Hunter must use tools (Read, Glob, Grep) to examine the actual code.