Hunt Simple — Development skill for Claude Code

Start a vulnerability hunt on $ARGUMENTS.

First, confirm scope. Then load any existing `recon-{target}-*.md` so you're not hunting blind.

Priority order (stop and report the moment you confirm one, then keep going):

1. IDOR — swap every ID/UUID/slug across every endpoint found; test horizontal (other users) and vertical (admin) access.
2. Auth flaws — session fixation, JWT alg/none, password reset token reuse, OAuth redirect_uri, 2FA bypass.
3. Access control — try every privileged