Endpoint Hunter

Description

--- name: endpoint-hunter description: Hunts publicly-exposed sensitive endpoints and files for a previously-ingested program (`/.env*`, `/config.*`, `/.git/HEAD`, `/swagger*`, `/actuator/env`, etc.). Passive discovery via gau + waymore (Wayback + CommonCrawl + OTX + URLScan, merged), then OPTIONAL active live-probe via httpx and nuclei exposure templates — both gated by `automated_tools_allowed=true` AND `explicit_scanner_ban != true`. Writes redacted candidate JSON to out/<slug>/endpoints/<tim

Installation

Installs to ~/.claude/agents/kennyalfredo-pr-agent-endpoint-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.