DEDUPED Hot AI repos, turned into use cases Get 5 a day

How to run unattended scans across several repositories with Vuln Hunter

Use the vulnhunter-run operator to clone, hunt, and record results without manual steps.

Authorization notice. Vuln Hunter is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Credentials. The operator clones repositories, so give it only the access tokens your harness needs and scope them to the repositories you are authorized to scan.

Who it is forA platform or security team lead who wants a recurring scan of many services and a scan manifest for each run.

The problemA one-off scan is useful for a demo but does not keep watch over code that changes every day.

The outcomeScan results and a validated scan manifest for each repository, produced by an operator that follows explicit stop rules.

What you need first

  • Source code you own or are authorized to audit
  • Your own model access, using the most capable reasoning model your agent harness offers
  • An agent harness with a skills directory and subagent support
  • Python and git installed locally

Steps

  1. Install the skills and the vulnhunter-run agent definition using the installer described in the repo
  2. Set the environment variables VULNHUNT_SKILLS_DIR, VULNHUNT_AGENTS_DIR, and VULNHUNT_MODEL for your harness
  3. Invoke the vulnhunter-run skill with the list of repositories you want scanned
  4. Locate the scan results and the scan manifest the operator writes for each repository
  5. Check the manifest validation output before you act on any finding

Prompt for your agent

Using the VulnHunter repo at nealbridges/VulnHunter, run the vulnhunter-run operator on the repositories <repo list>. Return the scan manifest and the results location for each repository. Verify that the manifest passes validation and that the operator stopped at its explicit stop rules where a repository could not be cloned or scanned.

Caveat. The README describes the vulnhunter-agent and harness/ folders for unattended and batch runs, but it does not give their setup steps, so check their own docs before scheduling.

Share: X LinkedIn Hacker News Email Copy link

Disclaimer

Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked "Seen in the wild", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email [email protected] and we will look at it promptly. Full disclaimer page