🔍
AutomationPython

Argus

by shuvonsec

Argus is an Automation skill for Claude Code, published by shuvonsec in claude-bug-bounty.

4.2K stars767 forkson shuvonsec/claude-bug-bountyAdded 2026/08/16+1% in starsRepository updated 2026/08/10
ai-securitybug-bountybugcrowdclaude-aiclaude-codectiethical-hackinghackeronehackinghacking-toolpenetration-testingreconvulnerability-scanner
Install in seconds
Install Argus
Copy Argus into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/shuvonsec/claude-bug-bounty/tree/main/skills/argus ~/.claude/skills/argus

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/shuvonsec/claude-bug-bounty.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
skills/argus/SKILL.md in shuvonsec/claude-bug-bounty
Installs to
~/.claude/skills/argus
Collection
One of 16 skills cataloged from this repository
Category
Automation1523 skills

What Argus does

Argus runs six automated scanners for web and LLM vulnerabilities: CORS misconfig, CRLF/host-header injection, NoSQL injection, JWT attacks, blind bug confirmation via OOB, and LLM red-teaming. Use it on JSON APIs, login endpoints, JWT auth, or any parameter that might reach the server.

Argus is cataloged under Automation on DirSkills. Argus comes from a repository tagged ai-security, bug-bounty, bugcrowd, claude-ai and claude-code.

Documentation

README

ARGUS — THE ALL-SEEING SCANNER SUITE

Named for Argus Panoptes, the hundred-eyed giant. Six "eyes" that surface what ordinary scans miss: two of the most common web2 classes (CORS, CRLF), the NoSQL "db" surface, JWT forging, blind-bug confirmation via OOB (the eye that sees the invisible — unblocks an entire severity band), and automated LLM red-teaming. All pure-Python, no new deps. Core logic is offline-testable.


0. ROUTING — which tool for what

This is the opening of the README. Read the full README on GitHub.

Commands Argus provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

  • /cors
  • /crlf
  • /nosqli
  • /jwt-scan
  • /oob
  • /llm-redteam
  • /jwks
  • /backticks
  • /arsenal

Frequently asked about Argus

  • What else does shuvonsec publish alongside Argus?

    Argus is one of 16 skills that DirSkills catalogs from shuvonsec/claude-bug-bounty, the repository it ships in. Its siblings there include Bug Bounty, Bug Bounty and Bug Bounty Methodology. Each one is a separate skill with its own page in this directory, installs the same way Argus does, and is maintained by shuvonsec in that same repository. The rest of the collection is listed on the shuvonsec/claude-bug-bounty page.

  • How does Argus compare to other Automation skills?

    Argus ranks #311 by stars among the 1523 Automation skills in this catalog. The most-starred ones next to it are Autonomous Loops, Autonomous Agent Harness and Automation Audit Ops. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Argus against them. Open each page to compare what they document and how they install.

More from shuvonsec/claude-bug-bounty

Argus is one of 16 skills cataloged on DirSkills from shuvonsec/claude-bug-bounty.

See all 16 skills
🐞
2w ago

Bug Bounty

Bug Bounty guides a complete bug bounty workflow from reconnaissance and vulnerability hunting through validation and report writing, including LLM/AI security testing and A-to-B bug chaining. Use it for any bug bounty task, from starting a new target to writing the final submission.
Quality
4.2K767
🐞
2w ago

Bug Bounty

Bug Bounty provides a complete bug bounty workflow covering reconnaissance, vulnerability hunting, AI/LLM security testing, bug chaining, and report writing. Use it for starting new targets, hunting specific vuln classes, auditing source code, validating findings, or writing reports.
Quality
4.2K767
🎯
2w ago

Bug Bounty Methodology

Bug Bounty Methodology structures a hunting session around a five-phase workflow and a critical-thinking framework, so an agent can choose a goal, select techniques, and derive next actions. Use it at the start of a bug bounty session, when switching targets, or when unsure what to do next.
Quality
4.2K767
📝
2w ago

Bug Bounty Report Writing

Bug Bounty Report Writing provides templates, tone guidelines, CVSS scoring, and checklists for writing bug bounty reports for HackerOne, Bugcrowd, Intigriti, and Immunefi. Use it after validating a finding and before submitting.
Writing
4.2K767
🛡️
2w ago

CI/CD Security

CI/CD Security audits CI/CD pipelines for workflow injection, secret exfiltration, self-hosted runner poisoning, OIDC token theft, and supply chain attacks. Use it when a target has public repos or CI/CD infrastructure.
DevOps
4.2K767
🔓
2w ago

Client Reverse

Client Reverse helps bug bounty hunters recover client-side request-signing and anti-bot token logic so they can replay protected API requests outside the browser. Use it when Burp or mitmproxy replay fails with 401/403 and you need to isolate the signer before hunting IDOR or auth issues.
Automation
4.2K767