Individual skill
bug-bounty
Complete bug bounty workflow — recon, pre-hunt learning, vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, GraphQL, HTTP smuggling, cache poisoning, OAuth, OIDC, SSTI, subdomain takeover, cloud misconfig, ATO chains, agentic AI), LLM/AI security testing (ASI01-ASI10), A-to-B bug chaining, bypass tables, language-specific grep patterns, and reporting (7-Question Gate, 4 validation gates, CVSS 3.1, PoC generation, submission checklist). Use for ANY bug bounty task — recon, hunting specific vulns, auditing source code, testing AI features, validating findings, or writing reports.
skills/bug-bounty/SKILL.md
Source commit 8060af0c1b0b6ecc6595ee3261f50aa613038620
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 3, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 5,662
- Repository last updated
- Oct 28, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai-security Repository topic
- bug-bounty Repository topic
- bugcrowd Repository topic
- claude-ai Repository topic
- ethical-hacking Repository topic
- hackerone Repository topic
- penetration-testing Repository topic
- recon Repository topic
- vulnerability-scanner Repository topic
- claude-code Repository topic
- security Derived category
- operations Derived category
- writing Derived category
- testing Derived category
- education Derived category
- security-application Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytesSKILL.mdcore · 78,994 bytes
Read excerpt
# Bug Bounty Master Workflow
Full pipeline: Recon -> Learn -> Hunt -> Validate -> Report. One skill for everything.
## THE ONLY QUESTION THAT MATTERS
> **"Can an attacker do this RIGHT NOW against a real user who has taken NO unusual actions -- and does it cause real harm (stolen money, leaked PII, account takeover, code execution)?"**
>
> If the answer is NO -- **STOP. Do not write. Do not explore further. Move on.**
### Theoretical Bug = Wasted Time. Kill These Immediately:
| Pattern | Kill Reason |
|---|---|