hunt-dispatch

Loads mode-appropriate offensive security skill sets for the /hunt orchestrator based on target fingerprinting.

1|Updated Aug 21, 2026
One-click install
npx skills add https://github.com/marcboggs/BMAD-AppSec-Orchestrator --skill hunt-dispatch-marcboggs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-dispatch
Source: https://github.com/marcboggs/BMAD-AppSec-Orchestrator/tree/main/.claude/skills/hunt-dispatch
Command: npx skills add https://github.com/marcboggs/BMAD-AppSec-Orchestrator --skill hunt-dispatch-marcboggs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? During a security engagement, the /hunt orchestrator must decide which of dozens of attack-testing skills to load for a given target and engagement mode. This Skill centralizes that decision in one place, fingerprinting the target and loading the correct red team or web application penetration testing skill set. ## Core Features & Use Cases - Target Fingerprinting: Runs a one-shot curl header check and parses recon live-hosts files to map signals (Okta, Entra, VPN, vCenter, cloud, APK) to platform-specific attack skills. - Mode-Based Skill Loading: Loads always-on, platform, and hunt-* skills for mode=redteam, or the full OWASP-relevant hunt-* set for mode=wapt with blackbox or greybox handling. - Deterministic Taxonomy Print: Emits a plain-text summary of loaded skills grouped by category (auth, injection, infra, cloud, AI) and selects the correct report format. - Use Case: After confirming a greybox WAPT engagement, invoke the loader to pull in all 27 web testing skills, apply captured credentials to authenticated tests, and print the taxonomy before active testing begins. ## Quick Start Ask the agent to run hunt-dispatch with mode=wapt and box=greybox so it loads the full web application testing skill set and prints the taxonomy.

Frequently Asked Questions about hunt-dispatch

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I choose which penetration testing skills to load for a target?▼

Run hunt-dispatch with the engagement mode, and it fingerprints the target via curl headers and recon live-hosts files. Matching signals like okta.com, vsphere, or amazonaws automatically map to the corresponding platform attack skills.

What is the difference between redteam and wapt mode in hunt-dispatch?▼

Redteam mode loads mindset and IR-detection skills plus fingerprint-matched platform skills and a high-impact hunt-* subset. Wapt mode loads the full 27-skill OWASP-relevant hunt-* set with methodology, arsenal, and triage-validation skills.

Does hunt-dispatch run attacks or probes against the target?▼

No, it only loads skill context and prints the taxonomy. After step 4 it returns control to /hunt, which handles sibling delegation and active testing separately.

How are greybox credentials handled during a web app pentest?▼

Credentials captured by /hunt stay in session memory and are applied to every authenticated test in greybox mode. They are never written to disk, logged, or persisted to user-level memory.

What report format does hunt-dispatch select for each engagement type?▼

Wapt mode uses the report-writing format, or bugcrowd-reporting if the target is on Bugcrowd. Redteam mode uses redteam-report-template with subject, observations, description, impact, recommendation, and PoC sections.