help
CommandShow available THRUNT threat hunting commands and artifact layout
List pending todos and select one to work on
name: thrunt:check-todos description: List pending todos and select one to work on argument-hint: "[area filter]" allowed-tools: - Read - Write - Bash - AskUserQuestion
<objective> List all pending todos, allow selection, load full context for the selected todo, and route to appropriate action.
Routes to the check-todos workflow which handles:
</objective>
<execution_context> @~/.claude/thrunt-god/workflows/check-todos.md </execution_context>
<context> Arguments: $ARGUMENTS (optional area filter)
Todo state and huntmap correlation are loaded in-workflow using `init todos` and targeted reads. </context>
<process> **Follow the check-todos workflow** from `@~/.claude/thrunt-god/workflows/check-todos.md`.
The workflow handles all logic including: 1. Todo existence checking 2. Area filtering 3. Interactive listing and selection 4. Full context loading with file summaries 5. Huntmap correlation checking 6. Action offering and execution 7. STATE.md updates 8. Git commits </process>
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories
Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
Publish a hunt as a case report, escalation, detection promotion, or leadership summary
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
Check text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…