Vulnerability Validation

Vulnerability Validation is a Quality skill for Claude Code, published by codexstar69 in bug-hunter.

491 stars60 forkson codexstar69/bug-hunterAdded 2026/08/26+1% in starsRepository updated 2026/08/17

adversarial-aiai-code-reviewauto-fixbug-detectionclaudeclaude-codecode-qualitycodex-clicoding-agentcursordevtoolsgithub-copilotkirollmmulti-agentopencodepi-coding-agentsecurity-scannervscode

Install in seconds

Install Vulnerability Validation

Copy Vulnerability Validation into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/codexstar69/bug-hunter/tree/main/skills/vulnerability-validation ~/.claude/skills/vulnerability-validation

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/codexstar69/bug-hunter.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/vulnerability-validation/SKILL.md in codexstar69/bug-hunter
Installs to: ~/.claude/skills/vulnerability-validation
Collection: One of 11 skills cataloged from this repository
Category: Quality — 1354 skills

What Vulnerability Validation does

Vulnerability Validation checks suspected security findings for reachability, exploitability, mitigations, and real-world impact. Use it after scans or before fixes to confirm whether a finding is actually exploitable.

Vulnerability Validation is cataloged under Quality on DirSkills. Vulnerability Validation comes from a repository tagged adversarial-ai, ai-code-review, auto-fix, bug-detection and claude.

Documentation

README

Excerpt

Vulnerability Validation

This is a bundled local Bug Hunter companion skill. It strengthens the security-specific parts of the Skeptic/Referee process.

Purpose

Take suspected or confirmed security findings and answer:

Is the vulnerable path reachable?
Can an attacker control the input?
Are there existing mitigations?
How exploitable is it really?
What is the CVSS / PoC / impact level?

Inputs

Prefer Bug Hunter-native artifacts:

.bug-hunter/hunter-findings.json
.bug-hunter/threat-model.md
.bug-hunter/security-config.json
.bug-hunter/dep-findings.json when dependency issues are involved

Workflow

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Vulnerability Validation

What else does codexstar69 publish alongside Vulnerability Validation?
Vulnerability Validation is one of 11 skills that DirSkills catalogs from codexstar69/bug-hunter, the repository it ships in. Its siblings there include Bug Hunter, Commit Security Scan and Doc Lookup. Each one is a separate skill with its own page in this directory, installs the same way Vulnerability Validation does, and is maintained by codexstar69 in that same repository. The rest of the collection is listed on the codexstar69/bug-hunter page.
How does Vulnerability Validation compare to other Quality skills?
Vulnerability Validation ranks #1237 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Vulnerability Validation against them. Open each page to compare what they document and how they install.