vulnhunter-security-scanner
VulnHunter Security Scanner
Skill by ara.so — Security Skills collection.
VulnHunter is an agentic AI security tool that applies proactive, attacker-first analysis directly to source code. Unlike traditional SAST scanners that flag patterns and generate false positives, VulnHunter reasons like an adversary: it identifies which defects are actually exploitable, maps attack paths, and proposes evidence-backed fixes.
Core Concepts
Attacker-First Forward Analysis: Starts at attacker-accessible entry points (APIs, file uploads, network messages) and reasons forward to evaluate whether an attacker can truly break through, rather than working backward from dangerous sinks.
Falsification Engine: After finding a potential vulnerability, VulnHunter runs a structured workflow to disprove its own argument, searching for flawed assumptions, logic gaps, or security controls that would block the attack.
Three-Skill Loop:
/vulnhunt- Hunt for vulnerabilities/vulnhunter-fix- Fix verified issues with test-driven remediation/vulnhunt-fix-verify- Independently verify fixes