VulnHunter: Agentic AI Security Scanner for Exploitable Vulnerabilities

Repositorynealbridges/VulnHunterTool

VulnHunter is an open-source, agentic AI security scanner that inspects source code from an attacker's perspective, confirms exploitability, and generates fixes. This maintained fork of Capital One's original project decouples the tool from Claude Code to support arbitrary agent harnesses and open-weight models.

Key points

  1. Exploitability over pattern matching: Rather than acting like a passive SAST scanner with high false-positive rates, VulnHunter traces attack paths, creates executable PoCs, and drafts test-first fixes.
  2. Harness portability: Unlike Capital One's upstream version pinned to Claude Code and Opus, this fork uses standard environment variables to work with any agent harness supporting skills and subagents.
  3. Designed for open-weight models: Commercial APIs often block adversarial security analysis with strict safeguards, prompting the project to target uncensored, open-weight reasoning models.
  4. Sandboxing roadmap: Planned enhancements focus on containerised exploit execution and measuring the actual impact of generated PoCs.

Why it matters

Traditional SAST engines overwhelm security and development teams with noise and theoretical issues. An agentic tool that validates exploitability with reproducible proof-of-concept tests helps engineering teams prioritise genuine security threats and fix them faster.

Analysis

The project is an early-stage but actively maintained fork (223 stars). Decoupling the original codebase from vendor-locked Claude Code setups increases its utility for teams running on-premises or sovereign infrastructure. Because adversarial exploit generation constitutes dual-use cybersecurity activity, operators must supply their own capable, uninhibited reasoning models.

Mentioned links

Found in

Summary generated by AI (Gemini 3.8 Flash, 6 October 2026). It may contain errors – the original source is authoritative.

Related entries

Similar in content, found by the AI search.

  • Repository:bex-co/bex-security

    Bex Security: Agent-Agnostic AI Security Scanner

    Bex Security is an open-source, upstream-first fork of OpenAI Codex Security that brings vulnerability detection, validation, and remediation to multiple coding agents via the Agent Client Protocol (ACP).

    51starsTypeScript

    AI & LLMs· Tool

  • Repository:NVIDIA/SkillSpector

    SkillSpector: Security Scanner for AI Agent Skills by NVIDIA

    SkillSpector is an open-source security scanner from NVIDIA designed to inspect extensions and skills for AI agents (such as Claude Code, Codex CLI, and MCP) for vulnerabilities and malicious patterns before installation.

    15.9kstarsPython

    AI & LLMs· Tool

  • Repository:affaan-m/agentshield

    AgentShield: Security Auditor for Claude Code and MCP Configurations

    AgentShield is an open-source TypeScript security scanner designed for AI agent setups. It inspects `.claude/` directories to detect hardcoded secrets, unverified MCP servers, hook injection vulnerabilities, and tool permission misconfigurations.

    1.2kstarsTypeScript

    AI & LLMs· Tool

  • Repository:cloudflare/security-audit-skill

    Cloudflare Open-Sources Security Audit Skill for Coding Agents

    Cloudflare's security-audit-skill is an open-source coding-agent workflow that orchestrates multi-phase security audits with independently verified, machine-readable findings.

    5.2kstarsJavaScript

    AI & LLMs· Tool

Back to the knowledge base

Let's talk about your project

Get in touch

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.