bountyforge
Parallel security audits and submission-ready bug bounty reports
All Skills in This Repository (1)
Pure Emerald Level IndicatorsFrequently Asked Questions
FAQPage SchemaHow to install BountyForge?โผ
Run `npx skills add Gabson0x/bountyforge --all -g -y` in your terminal to install the skill globally.
What does BountyForge actually test?โผ
It hunts vulnerabilities across web apps, APIs, and smart contracts on EVM, Solana, Move, and TRON, covering IDOR, SSRF, XSS, auth bypass, race conditions, and economic attacks.
Can BountyForge write bug bounty reports?โผ
Yes. It formats confirmed findings into submission-ready reports for HackerOne, Bugcrowd, Intigriti, and Immunefi, complete with CVSS 3.1 scoring.
Does BountyForge work with Claude Code?โผ
Yes. It runs as a standard skill in Claude Code and can orchestrate local tools like nmap, sqlmap, and ffuf when code execution is enabled.
How does BountyForge avoid false positives?โผ
Every finding passes refutation, reachability, trigger, and impact gates plus a red-team triage review before it is promoted into a report.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core