Skip to content

Thrunt God

Threat hunting command system for agentic IDEs

Install

$npx thrunt-god@latest --claude --local
Claude Code
claude mcp add thrunt-god -- npx thrunt-god@latest --claude --local
Cursor / Claude Desktop (mcp.json)
{
  "mcpServers": {
    "thrunt-god": {
      "command": "npx",
      "args": [
        "thrunt-god@latest",
        "--claude",
        "--local"
      ]
    }
  }
}

Install command taken from the project's README or registry entry. Always review code before running it.

Threat hunting command system for agentic IDEs. Claude Code · OpenCode · Gemini · Codex · Copilot · Cursor · Windsurf

/thrunt:autonomous  |  one command, full hunt

Install  ·   Phases  ·   Commands  ·   Flows  ·   Artifacts


Installation

npx thrunt-god@latest --claude --local

Bootstrap the hunt command surface into your local IDE environment.

IDE Command
Claude Code / Gemini /hunt:help
OpenCode /hunt-help
Codex $hunt-help
Copilot /hunt-help
Cursor / Windsurf hunt-help

Install the VS Code extension alpha

Download thrunt-god-0.3.0.vsix from the v0.3.0 release.

Then install it one of two ways:

  1. In VS Code, open Extensions, click the ... menu, choose Install from VSIX..., and select the downloaded file.
  2. From terminal:
code --install-extension thrunt-god-0.3.0.vsix

After install, open a folder containing .planning/MISSION.md or .hunt/MISSION.md and the THRUNT sidebar will activate automatically.


The Five Phases

Every hunt resolves through five phases. Each step is explicit.

Phase
Signal A detection, anomaly, lead, or intel input opens the case
Hunt Hypotheses are formed, scoped, and made testable
Swarm Parallel agents execute structured investigations across available sources
Receipt Every claim is bound to exact queries, timestamps, and evidence lineage
Publish Only validated findings are packaged for downstream consumers

Hunt Commands

Command Purpose
/hunt:new-program Stand up a long-lived hunt program
/hunt:new-case Open a case from a signal
/hunt:map-environment Inventory data sources, access, and topology
/hunt:shape-hypothesis Develop and refine testable hypotheses
/hunt:plan Plan a hunt phase
/hunt:run Execute a hunt phase
/hunt:validate-findings [phase] Validate evidence chain for findings
/hunt:publish [target] Package and ship findings
/hunt:help Show all commands and usage

Thrunt Commands

Utility and orchestration commands (/thrunt:*) for workspace management, diagnostics, settings, and agent control.


Common Flows

Single signal

/hunt:new-case
/hunt:shape-hypothesis
/hunt:plan 1
/hunt:run 1
/hunt:validate-findings 1
/hunt:publish

Similar plugs

Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local…

Why use many token when few token do trick. Viral skill + proxy for coding agents that cuts 65% of tokens by talking like a caveman.

The 1st Collaborative AI Design Agent Workspace. Local-first and open source. Create prototypes, websites, apps, dashboards, presentations, images, and videos with your team…

Explore related