Skip to content
Security
Command

/shape-hypothesis

Turn a signal into testable hunt hypotheses, scope, datasets, and success criteria

From plugin
thrunt-god
4156 skills18 agents56 commands5 hooks

Command definition

shape-hypothesis.md
name: hunt:shape-hypothesis
description: Turn a signal into testable hunt hypotheses, scope, datasets, and success criteria
argument-hint: "[signal-or-phase]"
allowed-tools:
  - Read
  - Bash
  - Write
  - AskUserQuestion
  - Task

<objective> Refine the active signal into testable hunt hypotheses.

`HYPOTHESES.md`, `SUCCESS_CRITERIA.md`, and `HUNTMAP.md` remain the source of truth.

**Updates:**

  • `.planning/HYPOTHESES.md`
  • `.planning/SUCCESS_CRITERIA.md`
  • `.planning/HUNTMAP.md`
  • `.planning/STATE.md`

**After this command:** Run `/hunt:plan 1` or `/hunt:run 1` if plans already exist. </objective>

<execution_context> @~/.claude/thrunt-god/workflows/hunt-shape-hypothesis.md @~/.claude/thrunt-god/templates/hypotheses.md @~/.claude/thrunt-god/templates/success-criteria.md @~/.claude/thrunt-god/templates/huntmap.md </execution_context>

<process> Execute the hypothesis-shaping workflow from @~/.claude/thrunt-god/workflows/hunt-shape-hypothesis.md. Drive toward hypotheses that can be proven, disproven, or left explicitly inconclusive. </process>

@backbay-labs
Ships withthrunt-god

Threat hunting command system for agentic IDEs

Stars on GitHub

Momentum

stars in total
41
Star history of backbay-labs/thrunt-god on GitHub, a chart by star-history.com

Other commands on thrunt-god.

new-program

new-program

Command

Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories

plan

plan

Command

Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

ironclaw12d13k
@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command