bug-bounty

Automate reconnaissance, vulnerability scanning, and report generation for bug bounty hunting.

Updated Jul 1, 2026
One-click install
npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill bug-bounty-bpnrockstar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bug-bounty
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill bug-bounty-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subfinder, nuclei, Burp Suite, Python, OpenAI, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive toolkit for bug bounty hunters, automating repetitive tasks and providing AI-assisted workflows to streamline the hunting process.

Core Features & Use Cases

  • Recon and Hunting: Automates subdomain enumeration, vulnerability scanning, and manual testing.
  • Validation and Reporting: Provides automated validation of findings and report generation.
  • CI/CD Security: Integrates with CI/CD pipelines for automated security testing.
  • Web3 and Smart Contract Security: Offers specialized skills for auditing smart contracts and detecting vulnerabilities in blockchain applications.
  • Mobile Pentest: Provides tools for mobile application security testing.
  • Code Review and Patching: Includes tools for automated code review and security patch generation.
  • LLM Red Teaming: Utilizes advanced LLM techniques for red teaming and exploitation.
  • Use Case: Imagine you are tasked with testing a web application for vulnerabilities. This Skill can automate the reconnaissance and testing process, validate the findings, and help you write a professional report.

Quick Start

Run the 'bug-bounty' skill to initiate a full-fledged bug bounty hunt on a target website.

Frequently Asked Questions about bug-bounty

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability assessment and reconnaissance for bug bounty hunting?

Bug bounty hunting automation streamlines reconnaissance by running subdomain enumeration and vulnerability scanning. This skill automates repetitive manual testing tasks using tools like subfinder and nuclei to identify potential security weaknesses efficiently.

Can I use Nuclei and subfinder with Python for automated security testing?

Yes, automated security testing integrates Nuclei and subfinder using Python. This skill orchestrates these dependencies to execute vulnerability scanning and subdomain enumeration, providing AI-assisted analysis for security testing workflows.

Does this bug bounty workflow support Web3 and smart contract security auditing?

Bug bounty workflows include specialized skills for Web3 and smart contract security. This skill offers targeted tools to audit smart contracts and detect vulnerabilities within blockchain applications during security testing.

What's the best way to generate professional bug bounty reports after finding vulnerabilities?

Generating professional bug bounty reports is automated after finding vulnerabilities. This skill validates your security testing findings and produces structured documentation, streamlining the reporting process for ethical hacking and cybersecurity tasks.

Do I need Burp Suite and OpenAI to run AI-assisted red teaming and exploitation?

Yes, AI-assisted red teaming requires dependencies like Burp Suite and OpenAI. This skill utilizes advanced LLM techniques for exploitation and decision-making, requiring specific Python libraries and security tools to function properly.

Can I integrate vulnerability scanning into CI/CD pipelines for continuous security testing?

Integrating vulnerability scanning into CI/CD pipelines enables continuous security testing. This skill supports automated security checks within deployment workflows, ensuring web applications are tested for vulnerabilities during development.