Execute reconnaissance, vulnerability analysis, and reporting for web applications and APIs.
npx skills add https://github.com/pdparchitect/rook --skill bug-bounty-pdparchitect
Please help me install this Agent Skill. Skill: bug-bounty Source: https://github.com/pdparchitect/rook/tree/main/skills/bug-bounty Command: npx skills add https://github.com/pdparchitect/rook --skill bug-bounty-pdparchitect
This skill solves the fragmentation of the bug bounty workflow by providing a unified, systematic pipeline for reconnaissance, vulnerability research, and professional reporting.
Use the bug bounty skill to perform a full reconnaissance and vulnerability scan on the target domain example.com.
High-intent search queries and answers about installing and using this skill.
You can automate bug bounty reconnaissance and vulnerability scanning by orchestrating a unified pipeline that handles asset discovery, subdomain enumeration, and deep-dive vulnerability hunting across web applications and APIs.
Finding complex vulnerabilities like IDOR and SSRF requires advanced hunting methodologies such as A-to-B bug chaining and cluster hunting, which validate exploitable security flaws by integrating automated tool orchestration with manual testing.
You can chain vulnerabilities to demonstrate higher impact by applying specialized A-to-B bug chaining techniques and cluster hunting methodologies, systematically linking individual security flaws to show compound exploit scenarios.
Yes, this security audit workflow targets web applications, APIs, and cloud infrastructure, systematically identifying exploitable security flaws and validating findings across these diverse environments.
You generate professional vulnerability reports by using structured gates and templates that ensure findings are validated, impactful, and written with a professional tone suitable for bug bounty submission.
Yes, the bug bounty workflow validates findings by integrating automated tool orchestration with manual methodology, ensuring that identified vulnerabilities are confirmed exploitable before generating the final report.
transilienceaiCoordinate subdomain discovery and port scanning to build a domain attack surface inventory.
grivera82Standardize vulnerability reports with structured sections and CVSS scoring.
KetomihineProvide offline ArchR documentation for scATAC-seq analysis workflows.
langbyyiIdentifies high-severity business logic vulnerabilities in web applications.
