bug-hunter

<p align="center">
  <img src="docs/images/hero.png" alt="Bug Hunter — Adversarial Bug Finding for Coding Agents. Pipeline: Triage → Recon → Hunters (Security, Logic) → Skeptics → Referee → Fixers → Verify. Compatible with all coding agent terminals and IDEs." width="720">
</p>

<h1 align="center">🐛 Bug Hunter</h1>
<p align="center"><strong>AI-powered adversarial bug finding that argues with itself to surface real vulnerabilities — and auto-fixes them safely.</strong></p>
<p align="center">
  <a href="#install">Install</a> ·
  <a href="#new-in-this-update">New in This Update</a> ·
  <a href="#start-here">Start Here</a> ·
  <a href="#usage">Usage</a> ·
  <a href="#how-the-adversarial-pipeline-works">How It Works</a> ·
  <a href="#features">Features</a> ·
  <a href="#security-classification-stride-cwe-cvss">Security</a> ·
  <a href="#supported-languages-and-frameworks">Languages</a>
</p>

---

## Install

```bash
# One-line install for any IDE (Claude Code, Cursor, Windsurf, Cursor, Kiro)
npx skills add codexstar69/bug-hunter
```

**Or install globally via npm:**

```bash
npm install -g @codexstar/bug-hunter
bug-hunter install     # auto-detects your IDE/agent
bug-hunter doctor      # verify environment
```

**Or clone manually:**

```bash
git clone https://github.com/codexstar69/bug-hunter.git ~/.agents/skills/bug-hunter
```

**Optional (recommended):** Install [Context Hub](https://github.com/andrewyng/context-hub) for curated documentation verification:
```bash
npm install -g @aisuite/chub
```

> **Requirements:** Node.js 18+. No other dependencies.
>
> **Works with:** [Pi](https://github.com/mariozechner/pi-coding-agent), Claude Code, Codex, Cursor, Windsurf, Kiro, Cursor — or any AI agent that can read files and run shell commands.

---

## New in This Update

This release is a reliability hardening pass — 11 bugs fixed, 10 previously-failing tests now pass, and the full pipeline is more robust end-to-end.

- **`High` severity works everywhere.** All JSON sche