Awarexone

Param Discover — Development skill for Claude Code

Development community

Discover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback).

How to install Param Discover

Installs to ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover/SKILL.md

Terminal
mkdir -p ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover && curl -fsSL https://raw.githubusercontent.com/Awarexone/Agentic-Bug-Hunter/HEAD/commands/param-discover.md -o ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Param Discover does


description: Discover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback). Hidden params are gold for IDOR, SSRF, LFI, redirect, and authorization bypass — often missed by automated scanners. Usage: /param-discover | /param-discover -l

/param-discover

Find HTTP parameters the application accepts but doesn't link from any visible endpoint. Useful when an endpoint looks unreachable or returns a generic response — often a hidden `id`, `user`, `

Alternatives in Development

  • Custom Dimensions — Custom Dimensions and Event Parameters 242 ★
  • Symfony Voters — Implement authorization logic using Symfony Voters 206 ★
  • Healthcare — Skills for healthcare workflows including clinical trials, prior authorization review, and FHIR API developmen 204 ★

Full documentation available on GitHub

View Source Repository