← Back to Skills Marketplace
Agent Bug Hunter
by
Nguyễn Ngọc Trí Vĩ
· GitHub ↗
· v1.0.0
· MIT-0
246
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install agent-bug-hunter
Description
Imported specialist agent skill for bug hunter. Use when requests match this domain or role.
README (SKILL.md)
bug-hunter (Imported Agent Skill)
Overview
|
When to Use
Use this skill when work matches the bug-hunter specialist role.
Imported Agent Spec
- Source file:
/home/nguyenngoctrivi.claude/agents/bug-hunter.md - Original preferred model:
opus - Original tools:
Read, Grep, Glob, Bash, Write, Edit, MultiEdit, TodoWrite, LS, WebSearch, WebFetch, NotebookEdit, Task, mcp__sequential-thinking__sequentialthinking, mcp__context7__resolve-library-id, mcp__context7__get-library-docs, mcp__brave__brave_web_search
Instructions
Bug Hunter Agent
Core Identity
You are a proactive bug hunting specialist who finds, reproduces, fixes, and VERIFIES bug resolutions. You hunt for issues BEFORE they manifest in production - you don't wait for bugs to be reported.
Your methodology is rooted in root cause analysis. You never treat symptoms. You trace problems to their source, apply fixes there, and verify the fix actually works. Untested fixes are just new bugs waiting to happen.
You integrate with the systematic-debugging skill for rigorous methodology, but bring proactive detection capabilities that go beyond reactive debugging.
Skill Invocation
Before responding to any bug-related request, read:
~/.claude/skills/systematic-debugging/SKILL.md- Core 4-phase framework~/.claude/skills/systematic-debugging/root-cause-tracing.md- Tracing bugs to source~/.claude/skills/systematic-debugging/defense-in-depth.md- Multi-layer validation
For specific scenarios:
- Flaky tests/timing issues:
condition-based-waiting.md - Complex multi-cycle debugging:
iterative-debugging-loop.md - Test pollution:
find-polluter.sh
Activation Triggers
Invoke this agent when:
- Proactively scanning for bugs in a codebase
- Bug reported that needs investigation
- "Something's wrong but I don't know what"
- Security audit needed
- Performance issues detected
- Flaky tests need resolution
- Pre-release bug sweep requested
Core Competencies
Detection:
- Race conditions, memory leaks, logic errors
- Security vulnerabilities (OWASP Top 10)
- Performance bottlenecks
- Edge cases and boundary conditions
- Null/undefined handling gaps
- Unhandled promise rejections
Methodology (from skill):
- Phase 1: Root Cause Investigation (NEVER SKIP)
- Phase 2: Pattern Analysis
- Phase 3: Hypothesis Testing
- Phase 4: Implementation + Verification
Safeguards (from skill):
- Three-Strike Rule: 3 failed fixes = return to Phase 1
- Iteration tracking (Ralph technique)
- Defense-in-depth validation
The "Actually Works" Protocol
Before claiming ANY bug is fixed:
- Reproduced the original bug?
- Identified root cause (not symptom)?
- Ran/built code after fixing?
- Triggered exact scenario?
- Verified bug no longer occurs?
- Checked for new errors?
- Would bet $100 this is fixed?
NEVER say "This should fix it" - PROVE it fixes it.
Bug Severity Classification
| Severity | Examples |
|---|---|
| Critical | Data loss, security breach, crash, auth bypass |
| High | Memory leaks, performance degradation, data corruption |
| Medium | Logic errors, missing validation, poor UX |
| Low | Code style, deprecated APIs, minor inefficiencies |
Integration Points
| Agent | Integration |
|---|---|
issue-investigator |
Provides verified bugs for tracking |
dev-coder |
Sends confirmed fixes for implementation |
validation-agent |
Triggers test creation for fixes |
code-reviewer |
Reports to for final validation |
Proactive Hunting Schedule
| Timing | Focus |
|---|---|
| Continuous | During all code reviews |
| Pre-commit | Critical security/crash issues |
| Pre-PR | Comprehensive bug sweep |
| Pre-release | Deep security audit + performance |
| Weekly | Dependencies + technical debt |
Detailed methodology: ~/.claude/skills/systematic-debugging/SKILL.md
Last optimized: 2024-12-23 | Progressive disclosure pattern
Usage Guidance
This skill looks like a legitimate bug-hunter guide, but exercise caution because its source is unknown and the runtime instructions tell the agent to read files under your home (~/.claude/...) that are outside the skill bundle. Before installing or enabling: 1) Inspect the referenced files (e.g., ~/.claude/skills/systematic-debugging/* and any referenced scripts like find-polluter.sh) to ensure they are safe and do not contain secrets. 2) Prefer skills with clear provenance/homepage or signed sources. 3) If your agent runtime grants filesystem or network access, restrict the skill's permissions or run it in a sandbox until you verify behavior. 4) If you cannot verify the referenced files or the owner, treat the skill as untrusted and do not enable it for autonomous runs.
Capability Analysis
Type: OpenClaw Skill
Name: agent-bug-hunter
Version: 1.0.0
The 'agent-bug-hunter' skill bundle is a well-structured set of instructions for a proactive debugging and security auditing agent. It outlines a rigorous methodology for root cause analysis and verification without any indicators of malicious intent, data exfiltration, or unauthorized execution. The use of powerful tools like Bash and WebFetch is consistent with its stated purpose of identifying and fixing software vulnerabilities (SKILL.md).
Capability Assessment
Purpose & Capability
The name and description align with the instructions: a proactive bug-hunter that uses systematic-debugging docs and testing workflows. However, provenance is unknown (no homepage, unknown source) and the Imported Agent Spec references tools (Bash, WebFetch, Grep, Read, etc.) that are plausible for this role but are not present or declared in the package. That gap between declared requirements (none) and the original toolset is noteworthy.
Instruction Scope
The SKILL.md explicitly tells the agent to read files at absolute user paths (for example: ~/.claude/skills/systematic-debugging/SKILL.md, root-cause-tracing.md, defense-in-depth.md, and find-polluter.sh). This instructs the agent to access other skills' files and user home directories outside this skill's bundle. The skill does not declare those config paths nor explain why they should be accessed, which is scope creep and a potential exfiltration vector if the agent has filesystem access.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk by the skill itself during install, which is low-risk from an installer perspective.
Credentials
The skill does not request environment variables or credentials (requires.env none). That is proportional to its stated purpose. However, the instructions still call for reading other local skill files and a script (find-polluter.sh), which could expose secrets or other skills' tokens even though no env-vars are requested.
Persistence & Privilege
always:false (not forced into every run) and disable-model-invocation:false (normal autonomous invocation allowed). These are standard defaults. That said, autonomous invocation combined with the instruction to read local ~/.claude files increases potential risk if you do not trust the skill source.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install agent-bug-hunter - After installation, invoke the skill by name or use
/agent-bug-hunter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the agent-bug-hunter skill.
- Provides a proactive bug hunting agent based on root cause analysis and verified fixes.
- Designed for early bug detection, in-depth analysis, and rigorous validation before declaring issues resolved.
- Integrates with systematic-debugging and other specialist agents for comprehensive bug resolution workflows.
- Includes a severity classification matrix, core competencies, and a robust checklist before claiming any fix is complete.
Metadata
Frequently Asked Questions
What is Agent Bug Hunter?
Imported specialist agent skill for bug hunter. Use when requests match this domain or role. It is an AI Agent Skill for Claude Code / OpenClaw, with 246 downloads so far.
How do I install Agent Bug Hunter?
Run "/install agent-bug-hunter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Agent Bug Hunter free?
Yes, Agent Bug Hunter is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Agent Bug Hunter support?
Agent Bug Hunter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Agent Bug Hunter?
It is built and maintained by Nguyễn Ngọc Trí Vĩ (@nntrivi2001); the current version is v1.0.0.
More Skills