hunt-saml
Identifies and exploits SAML/SSO vulnerabilities, enhancing security assessments against XML Signature Wrapping and other attack vectors.
Install this skill
or
55/100
Security score
The hunt-saml skill was audited on Jun 10, 2026 and we found 3 security issues across 2 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
medium line 71
Template literal with variable interpolation in command context
SourceSKILL.md
| 71 | ``` |
high line 64
Access to /etc/passwd
SourceSKILL.md
| 64 | <!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]> |
critical line 108
Access to /etc/passwd
SourceSKILL.md
| 108 | - **`hunt-xxe`** — SAML assertions ARE XML; XXE in the assertion parser is a separate chain on top of XSW. Chain primitive: SAML parser without `disallow-doctype-decl` + `<!DOCTYPE foo [<!ENTITY xxe S |
Scanned on Jun 10, 2026
View Security DashboardGitHub Stars 2.2K
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
elementalsouls/Claude-BugHunter