shuvonsecCommunity·11 Agent Skills Included

claude-bug-bounty

AI-powered bug bounty hunting from recon to submission-ready reports

Automates the full bug bounty workflow: recon, vulnerability hunting, validation, and report writing for HackerOne, Bugcrowd, Intigriti, and Immunefi. Covers 26 web bug classes, GraphQL, CI/CD, mobile, smart contracts, and credential attacks with ready payloads and bypass tables. Kills weak findings early with a 7-Question Gate so hunters only submit provable, payable bugs.

4,659|822

↗

npx skills add shuvonsec/claude-bug-bounty --all -g -y

Available:

Tells the AI agent which skills, slash commands, and specialized agents to invoke for each hunting phase, and enforces always-on rules like scope verification, killing theoretical bugs, and tracking every lead on the lead board.

All Skills in This Repository (11)

Pure Emerald Level Indicators

📦 In Repo

shuvonsec

bug-bounty

Automate bug bounty workflows from reconnaissance to report writing.

meme-coin-audit

Detects rug pull patterns and authority risks in EVM and Solana token contracts.

cicd-security

Detects CI/CD pipeline vulnerabilities including workflow injection, secret exfiltration, and runner poisoning.

report-writing

Writes impact-first bug bounty reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.

argus

Scans web targets for CORS, CRLF, NoSQLi, JWT, blind OOB, and LLM vulnerabilities.

client-reverse

Reverse client-side request signing to replay and fuzz protected APIs.

mobile-pentest

Tests Android and iOS apps for bug bounty via proxy interception, decompilation, and runtime instrumentation.

bb-methodology

Orchestrates bug bounty hunting sessions using a five-phase workflow and critical thinking framework.

triage-validation

Validates bug bounty findings through a 7-question gate before report submission.

web2-recon

Automates web reconnaissance from subdomain enumeration through URL crawling to prioritized attack surface mapping.

web3-audit

Audit Solidity and Rust smart contracts for ten DeFi vulnerability classes with grep patterns and Foundry PoC templates.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install claude-bug-bounty?▼

Run `npx skills add shuvonsec/claude-bug-bounty --all -g -y` in your terminal to install the full toolkit globally.

What does this bug bounty toolkit actually do?▼

It runs recon, hunts vulnerabilities across 26+ bug classes, validates findings with a strict gate, and writes submission-ready reports for major bounty platforms.

Does it work with Claude Code and other AI agents?▼

Yes. It supports Claude Code, OpenCode, Codex, Pi Agent, and shared agent skill harnesses, plus a standalone CLI mode with free local AI providers.

Can it audit smart contracts and meme coins?▼

Yes. It includes web3 audit skills covering 10 DeFi bug classes, rug pull detection, Solana token authority checks, and Foundry PoC templates.

Do I need bug bounty experience to use it?▼

No. The built-in methodology skill guides you phase by phase, and the 7-Question Gate prevents you from submitting weak or invalid findings.