Hunt Endpoints — Git skill for Claude Code
Hunt publicly-exposed sensitive endpoints and files for an ingested program (/.env, /config., /.git/HEAD, /swagger, /actuator/env, etc.).
How to install Hunt Endpoints
Installs to ~/.claude/commands/kennyalfredo-pr-agent-hunt-endpoints.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/commands/hunt-endpoints.md -o ~/.claude/commands/kennyalfredo-pr-agent-hunt-endpoints.md Restart Claude Code, or start a new session, for it to be picked up.
What Hunt Endpoints does
description: Hunt publicly-exposed sensitive endpoints and files for an ingested program (/.env*, /config.*, /.git/HEAD, /swagger*, /actuator/env, etc.). Passive enumeration via gau; OPTIONAL active live-probe via httpx + nuclei gated on automated_tools_allowed=true AND explicit_scanner_ban != true. Writes redacted candidates to out//endpoints/.json. Does NOT verify ownership. argument-hint: allowed-tools: Agent
You are kicking off endpoint-disclosure hunting fo
Alternatives in Git
- Zcf — GitHub Repo stars Zero-Config Code Flow for Claude code & Codex Zero-config workflow 5.8k ★
- Intel — On-demand intelligence fetch for a target — CVEs, disclosed reports, new features 3.8k ★
- Skill Copilot Provider — GitHub Copilot CLI as optional zero-cost provider via copilot -p programmatic mode 2.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Secrets Hunt
Hunt leaked credentials in a filesystem path, git history, JS bundles from a recon run, or an entire GitHub or
Mimir Diff
Estimate token cost of the current git diff (staged or HEAD) + optional task description
Mem Config
Configure git remote + branch + token for ~/.gowth-mem/ sync. Writes ~/.gowth-mem/config.json (gitignored). To
Secret Rotation Walkthrough
Use when a secret has been exposed (committed to git, leaked in logs, shared accidentally) and needs immediate
Git Sanitize
Git Sanitize - Scan for Sensitive Info Before Pushing
Session Status
The same Pyramid-Principle brief scoped to the current session - same PO, PM or BA audience and three axes, so
Related Agents
Endpoint Hunter
Hunts publicly-exposed sensitive endpoints and files for a previously-ingested program (/.env, /config., /.git
Info Disclosure
Information Disclosure specialist (H1 #18, CWE-200/209/215/538/668/798). Use for finding exposed sensitive dat
Recon Agent
Subdomain enumeration and live host discovery specialist. Runs Chaos API (ProjectDiscovery), subfinder, assetf