Hunt Plan

Name: Hunt Plan
Author: backbay-labs

ASecurity

Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs

36 stars
0 votes
0 copies
3 views
Added May 28, 2026

ai-agentsgobashgit

Security analysis

A100/100

Scanned May 28, 2026

npx -y skills add backbay-labs/thrunt-god --skill hunt-plan --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Hunt Plan?

Add the live security badge to your README. It updates with every re-scan.

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/backbay-labs-hunt-plan/badge)](https://www.skillsdirectory.com/skills/backbay-labs-hunt-plan)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: hunt-plan
description: Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
argument-hint: "<phase>"
allowed-tools: Read, Bash, Write, Task
---

<objective>
Plan a hunt phase from the current HUNTMAP.

`HUNTMAP.md` remains the source of truth for phase layout and sequencing.

**Creates or updates:**
- `.planning/phases/[phase-slug]/`
- `CONTEXT.md`
- `PLAN.md` files
- `.planning/STATE.md`
- `.planning/HUNTMAP.md` when phase metadata changes

**After this command:** Run `/hunt-run <phase>`.
</objective>

<execution_context>
@.github/thrunt-god/workflows/hunt-plan.md
@.github/thrunt-god/templates/context.md
@.github/thrunt-god/templates/phase-prompt.md
</execution_context>

<process>
Execute the hunt planning workflow from @.github/thrunt-god/workflows/hunt-plan.md.
Plans must name the telemetry source, intended evidence, and required receipts.
</process>