Hunt CI/CD is a DevOps skill for Claude Code, published by elementalsouls in Claude-BugHunter.
Hunt CI/CD finds and validates vulnerabilities in CI/CD pipelines, including Jenkins RCE, GitHub Actions injection, self-hosted runner poisoning, OIDC abuse, and Terraform state leakage. Use it when targeting public orgs, CI dashboards, or build artifacts.
Hunt CI/CD is cataloged under DevOps on DirSkills. Hunt CI/CD comes from a repository tagged ai-security, anthropic, application-security, bug-bounty and bugbounty.
Documentation
Jenkins /script console reachable = immediate RCE. A GitHub Actions pull_request_target (or workflow_run) workflow that checks out the PR head ref and references untrusted ${{ github.event.* }} in a shell run: = "Pwnrequest" → secret exfil from a fork PR with zero approval.
This is the opening of the README. Read the full README on GitHub.
Slash commands named in this skill’s SKILL.md, listed in the order they first appear.
/script/secretsHunt CI/CD is one of 25 skills that DirSkills catalogs from elementalsouls/Claude-BugHunter, the repository it ships in. Its siblings there include API Misconfig Hunter, APK Red Team Pipeline and Auth Bypass Hunting. Each one is a separate skill with its own page in this directory, installs the same way Hunt CI/CD does, and is maintained by elementalsouls in that same repository. The rest of the collection is listed on the elementalsouls/Claude-BugHunter page.
Hunt CI/CD ranks #194 by stars among the 798 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Hunt CI/CD against them. Open each page to compare what they document and how they install.
Hunt CI/CD is one of 25 skills cataloged on DirSkills from elementalsouls/Claude-BugHunter.
Hunt CI/CD is one of 798 DevOps skills cataloged on DirSkills, ranked #194 by stars among them.