Pentest AI エージェント — 結果と欠如の両方を証明します。 スキルバンドルと、Red-teaming LLMエージェント用のランナブルエンジン:チャットボット、RAGアシスタント、ツール呼び出しコピロ、MCPサーバー、および自動ReActエージェント・24スキル(23ハント+方法論)・4検出アーム・24/24ラボゲート・7ターゲット環境・FN 0オーバー949フィールドラン・ロード・クロード・コード、OpenCode、エルメス、コーデック CLI、AntiGravity。

Sachin Sharma — Bug Hunting & GenAI Security Research により構築されました。

お問い合わせ

Claude-BugHunter - 同じ形状、 異なった質。 BugHunter は Web アプリをハントします。 Claude-AgentHunter は、エージェント自体をハントします。

これは何ですか

Claudeコードスキルシステム(およびOpenCode、Hermes、Codex CLI、AntiGravity)のドロップインスキルバンドル。 一度インストールし、ハーネスは、エージェントのセキュリティで推測し、懲戒されたペテストを実行し始めます:それはターゲットエージェントを指紋し、表面による正しい[[hunt-agent-*スキルを選択し、stdlib専用のプローブを実行し、4アームエンジンでトレースをスコアし、すべての発見をゲートすると、流暢な回答は漏れとして出荷されず、サイレントプローブは「クリーン」として出荷しません.

Claude-AgentHunter

Pentest AI agents — and prove both the findings and the absences. A skill bundle plus a runnable engine for red-teaming LLM agents: chatbots, RAG assistants, tool-calling copilots, MCP servers, and autonomous ReAct agents · 24 skills (23 hunt + methodology) · 4 detection arms · 24/24 lab gates · 7 target environments · FN 0 over 949 field runs · loads into Claude Code, OpenCode, Hermes, Codex CLI and AntiGravity.

Built by Sachin Sharma — Bug Hunting & GenAI Security Research.

---

Sibling to Claude-BugHunter — same shape, different quarry. BugHunter hunts web apps; Claude-AgentHunter hunts the agents themselves.

24 skills   ·   4 detection arms   ·   24/24 lab gates   ·   7 target environments   ·   FN 0 over 949 runs

What is this

A drop-in skill bundle for the Claude Code skills system (and OpenCode, Hermes, Codex CLI, AntiGravity). Install once and the harness stops guessing at agent security and starts running a disciplined pentest: it fingerprints the target agent, picks the right hunt-agent-* skills by surface, runs their stdlib-only probes, scores the traces with a 4-arm engine, and gates every finding so a fluent answer never ships as a leak and a silent probe never ships as “clean”. Describe the target in plain English and the relevant skills auto-load — no invocation by name. The whole flow runs as one command, /hunt-agent, or stage by stage (see Commands).

Why it exists

An agent generates text; it does not retrieve state. That creates two failure modes a web pentest never has to worry about, and Claude-AgentHunter is built around catching both:

• A fluent answer looks identical to a real leak → the False-Positive gate.
• A silent probe looks identical to a secure target → the Negative-Result gate.

The second one is the hard one. Across this project’s own development, ten probe defects each reported a compromise as clean — a similarity gate that scored a real leak 0.03, an HTTP 500 counted as a refusal that buried a confirmed bypass, a token floor that hid the forgery that leaked the flag. Every one looked like a passing test. Both gates live in engine/gates.py and ship in every skill.

How the skills work

Each skill is skills//SKILL.md — Agent-Skills markdown with frontmatter (name, description, sources, validated_against, report_count — the count of in-house field-validated reports behind the skill, 0 for reference-only). Harnesses topic-match on the description; describing your test in plain English loads the relevant skills, no explicit invocation. Unlike static methodology skills, each one carries a Runnable Probe that executes against a live agent and a