requesthunt

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
9
Flagged
9
Chunks
11
Flagged Files (9)
.claude-plugin/plugin.jsonHIGH
78.3%

Malicious tool definition detected

Tool: .claude-plugin/plugin.json Description: { "name": "requesthunt", "version": "1.0.0", "description": "Generate user demand research reports from real user feedback.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: requesthunt description: Generate user demand research reports from real user feedback. Scrape and analyze feature requests, complaints, and questions from Reddit, X, and GitHub.

examples/calendar-app-research.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/calendar-app-research.md [1/2] Description: # RequestHunt Example: Deep Investigation into Calendar/Scheduling Apps This is a complete conversation example showing how the requesthunt skill helps users conduct user demand research by collecting and analyzing real user feedback from Reddit, X (Twitter), and GitHub.

Tool: examples/calendar-app-research.md [2/2] Description: based on when those gaps begin—rather than respecting my preferred scheduling intervals." --- #### 6.

examples/scheduling-tools-research-report.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/scheduling-tools-research-report.md [1/2] Description: # Scheduling/Booking Tools User Demand Research Report ## Overview - **Scope**: Cal.com, Calendly, and similar scheduling/booking tools - **Focus**: User pain points and feature gaps - **Data Sources**: Reddit, X (Twitter), GitHub - **Feedback Collected**: 150+ real user requests and complaints - **Date**: January 2026 --- ## Executive Summary Users of scheduling/booking tools like Cal.com and Calendly experience significant f

Tool: examples/scheduling-tools-research-report.md [2/2] Description: scheduled appointments | X | 0 | **Representative Quotes:** > "User expresses frustration over the lack of notifications in the product, which they find to be an organizational hazard." — @justin-hackin (GitHub) **Opportunity**: Multi-channel notifications (SMS, push, voice AI, self-hosted options).

scripts/get_topics.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/get_topics.py Description: #!/usr/bin/env python3 """Get available topics from RequestHunt API.""" import json import os import sys import urllib.request import urllib.error API_BASE = "https://requesthunt.com" def get_api_key(): key = os.environ.get("REQUESTHUNT_API_KEY") if not key: print("Error: REQUESTHUNT_API_KEY environment variable not set", file=sys.stderr) print("Get your key from: https://requesthunt.com/settings/api", file=sys.stderr) sys.exit(1) return key def get_topic

scripts/get_usage.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/get_usage.py Description: #!/usr/bin/env python3 """Get API usage stats from RequestHunt.""" import json import os import sys import urllib.request import urllib.error API_BASE = "https://requesthunt.com" def get_api_key(): key = os.environ.get("REQUESTHUNT_API_KEY") if not key: print("Error: REQUESTHUNT_API_KEY environment variable not set", file=sys.stderr) print("Get your key from: https://requesthunt.com/settings/api", file=sys.stderr) sys.exit(1) return key def get_usage(): ap

scripts/list_requests.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/list_requests.py Description: #!/usr/bin/env python3 """List feature requests from RequestHunt API.""" import argparse import json import os import sys import urllib.request import urllib.error API_BASE = "https://requesthunt.com" def get_api_key(): key = os.environ.get("REQUESTHUNT_API_KEY") if not key: print("Error: REQUESTHUNT_API_KEY environment variable not set", file=sys.stderr) print("Get your key from: https://requesthunt.com/settings/api", file=sys.stderr) sys.exit(1) retu

scripts/scrape_topic.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/scrape_topic.py Description: #!/usr/bin/env python3 """Start a realtime scrape job for a topic on RequestHunt.""" import argparse import json import os import sys import urllib.request import urllib.error API_BASE = "https://requesthunt.com" def get_api_key(): key = os.environ.get("REQUESTHUNT_API_KEY") if not key: print("Error: REQUESTHUNT_API_KEY environment variable not set", file=sys.stderr) print("Get your key from: https://requesthunt.com/settings/api", file=sys.stderr) sys.e

scripts/search_requests.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/search_requests.py Description: #!/usr/bin/env python3 """Search feature requests from RequestHunt API with optional realtime expansion.""" import argparse import json import os import sys import urllib.request import urllib.error API_BASE = "https://requesthunt.com" def get_api_key(): key = os.environ.get("REQUESTHUNT_API_KEY") if not key: print("Error: REQUESTHUNT_API_KEY environment variable not set", file=sys.stderr) print("Get your key from: https://requesthunt.com/settings/ap

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
9
Files Flagged
9
Chunks Analyzed
11
Analyzed
Feb 21, 2026, 10:02 AM
Security Audit — runlayer — requesthunt