security by encod3d-sec
Hunt: Core encod3d-sec/hunt-core
Shared discipline for every hunt-* skill: scope and authorization gating, the two-account rule, the confirmation gate that separates a real finding from a false positive, enumeration limits, stop conditions, marker discipline, wiki-first query and self-heal, FIND output, Deadends, and wiki distillation. ALWAYS LOADED alongside any hunt skill. Also trigger directly on "is this in scope", "is this a real bug", "how do I confirm this", "should I keep going", "how many IDs should I test", "what seve
Install linked skill Links this skill to your agents and keeps it current with the author's updates.
Fork editable copy Install locally · CLI or SKILL.md 1 · One-time — install the CLI (
docs ↗ )
$ pip install decimalaiCopy
2 · Get the skill — writes .claude/skills/encod3d-sec-hunt-core/SKILL.md
$ decimalai skills pull encod3d-sec-hunt-core --out .claude/skills/Copy
Copy link Copy README badge Copy SKILL.md No CLI? Get the same file — curl · raw file $ curl -fsSL --create-dirs -o .claude/skills/encod3d-sec-hunt-core/SKILL.md https://app.decimal.ai/s/encod3d-sec-hunt-core/SKILL.mdCopy
Code scan Clean Intent Passed Content Clean
Overview Benchmark Contents Activity Versions 1 Ratings 0
Benchmark snapshot Same tasks, with and without this skill.
View full report → Model gemini-3.6-flashMeasured 10/10/2026 v1
Pass-rate lift +64 pp percentage-point change
Pass rate with skill 82% 18% without skill
Tokens +124% vs. without skill
Agent turns 0% vs. without skill Usage All-time distinct users and times used, across every version.
View activity → Read the skill SKILL.md · instructions and conventions
Open contents → Safety and source details
SkillSafety ✓ 3 of 3 passed ✓ Code scan 15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v5 — 9/14/2026
View 15 scanner checks live_secret remote_code_execution reverse_shell data_exfiltration ssrf_metadata agent_snooping anti_refusal destructive_commands obfuscated_unicode unicode_homoglyph opaque_blob suspicious_url tool_overreach trigger_abuse prompt_injection_phrasing
✓ Intent Safe
LLM judge · does the skill do what it claims
✓ Content Clean
LLM judge · policy & harmful-content review
Source Imported License MITImported 9/14/2026Version v1