How do I install the Hunt Lfi skill?

Run npx skillmds@latest add duriantaco/hunt-lfi in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Hunt Lfi safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Hunt Lfi?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Hunt Lfi free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Hunt Lfi?

duriantaco (@duriantaco) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Hunt Lfi by duriantaco — Agent Skill

Name: Hunt Lfi
Author: duriantaco

Hunt Lfi

Investigate authorized local file inclusion, path traversal, and arbitrary file-read boundaries. Use when typed discovery identifies path, file, page, template, include, download, or document inputs, target-observed file-read replay contracts, local-file markers, or suspected traversal-normalization failures.

duriantaco 109e357 2 files · 1.8 KB Updated Sep 17, 2026

File contents

Hunt Local File-Read Boundaries

Treat this card as advisory prioritization. Keep local reads distinct from remote fetches, uploads, parser behavior, and inclusion execution.

Workflow

Select a typed path input and preserve its method, identity, fixed fields, and encoding.
Change only that input; pair a valid baseline with a same-shape missing-file control.
Use file_fetch_parser for discovery and file_read_extract only after a reusable read replay. Both include fixed file and secret candidates, which must all be authorized.
Stop after the minimum target-origin marker. Preserve redacted controls, deltas, and evidence references, and report validated vulnerabilities without requiring a challenge artifact.

Evidence Gate

Confirm only recognizable local-file content absent from the paired control, or separately validated include execution. Path echoes, normalization, filenames, errors, and status differences remain observations. Keep any contract_missing result suspected rather than promoting it.

Stop Conditions

Stop without a typed path input, replay, clear control, or policy budget. Do not add filesystem enumeration; redact credentials, keys, source, logs, and unnecessary file content.

Frequently asked questions