# find-cve-agent

Open Source CVE Hunting Harness for Claude Code A Claude Code plugin that systematically finds real CVEs in open source packages through coordinated multi-agent security research.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/byamb4-find-cve-agent
- Source: https://github.com/ByamB4/find-cve-agent
- Price: free and open source

## Summary
find-cve-agent is a Claude Code plugin with 21 hand-picked skills for security work, indexed on Flowy. Install it with the command on its page. It includes advisory-mining, auth-bypass, code-injection-codegen. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

## Install (Claude Code)
```
npx -y skills add byamb4/find-cve-agent
```

## Skills
- advisory-mining
- auth-bypass
- code-injection-codegen
- command-injection
- cross-pollination
- decompression-bomb
- entity-expansion
- fp-check
- jwt-attacks
- method-clobbering
- path-traversal
- prototype-pollution
- recursion-dos
- redos
- report-writing
- sandbox-escape
- sqli
- ssrf
- ssti
- target-recon
- xxe

## FAQ

### What is find-cve-agent?
Open Source CVE Hunting Harness for Claude Code A Claude Code plugin that systematically finds real CVEs in open source packages through coordinated multi-agent security research.

### How do I install find-cve-agent?
Run these in Claude Code: npx -y skills add byamb4/find-cve-agent. Then prompt normally.

### Does find-cve-agent auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

### Is find-cve-agent free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.