What problem does it solve? Bug bounty hunters often waste time wandering between targets, chasing false positives, or submitting findings that get rejected as informational. This Skill provides a master orchestration workflow that tells you what to do at every stage of a hunting session, how to think like a top-tier hunter, and how to avoid the process mistakes that get findings retracted. ## Core Features & Use Cases - 5-Phase Non-Linear Workflow: Guides you through Recon, Mapping, Vulnerability Discovery, Prove & Escalate, and Validate & Report, with explicit rules for when to jump back between phases. - Engagement Mode Confirmation: Forces an upfront decision between bug bounty, red team, pentest, and internal audit modes so findings match what the platform actually accepts. - False-Positive Prevention Discipline: Enforces marker discipline, body-diff verification, statistical sampling for timing claims, and a shell-loop ban to kill findings that would come back N/A. - Use Case: You start a session on a new HackerOne program and feel lost. The Skill walks you through defining a goal, selecting vuln classes, routing to the right recon tools, and escalating a low-impact XSS into an account takeover chain before writing the report. ## Quick Start Ask the AI to start a bug bounty hunting session on your target and guide you through the methodology phases step by step.
