skills.rest
Skobyn
SkobynCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

bug-bounty

Guide security researchers through a systematic bug bounty workflow.

Updated Jun 24, 2026
Search Tags:#bug bounty#vulnerability hunting#security research#AI-assisted security#comprehensive reporting
One-click install
npx skills add https://github.com/Skobyn/talon --skill bug-bounty-skobyn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bug-bounty
Source: https://github.com/Skobyn/talon/tree/main/skills/bug-bounty
Command: npx skills add https://github.com/Skobyn/talon --skill bug-bounty-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill unit provides a comprehensive and systematic bug bounty workflow to help researchers effectively hunt, report, and validate security vulnerabilities.

Core Features & Use Cases

  • Full Workflow: Integrates reconnaissance, pre-hunt intelligence, vulnerability hunting, validation, and reporting into a single streamlined process.
  • Advanced Hunting Methods: Implements advanced bug hunting techniques, such as A-to-B bug chaining, cluster hunting, and strategic data collection.
  • Technical Specializations: Delivers focused vulnerability identification, with deep dives into areas like IDOR, SSRF, XSS, auth bypass, and OAuth.
  • AI-Driven Security Testing: Employs AI-powered tools for prompt injection, indirect injection, ASCII smuggling, exfil channels, RCE via code tools, and system prompt extraction.
  • Reporting and Hygiene: Offers comprehensive reporting features, including the 7-Question Gate, severity validation, PII redaction, and AI-generated PoCs.

Quick Start

Use the bug-bounty skill to initiate a comprehensive bug bounty workflow by entering 'bug-hunting' in Claude Code.

Frequently Asked Questions about bug-bounty

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure a systematic bug bounty workflow from reconnaissance to reporting?▼

A systematic bug bounty workflow integrates reconnaissance, pre-hunt intelligence, vulnerability hunting, validation, and reporting into a single streamlined process. This approach ensures thorough coverage and efficient identification of security vulnerabilities.

What is A-to-B bug chaining and how does it work in vulnerability hunting?▼

A-to-B bug chaining is an advanced vulnerability hunting technique that combines multiple lower-severity flaws into a higher-impact exploit chain. This method allows researchers to uncover critical security issues that individual bugs might not reveal on their own.

Can I use AI-assisted tools for prompt injection and validating security vulnerabilities?▼

Yes, AI-assisted security testing employs AI-powered tools for identifying and validating vulnerabilities through techniques like prompt injection, indirect injection, ASCII smuggling, exfil channels, and system prompt extraction.

How do I validate severity and redact PII when reporting security vulnerabilities?▼

Comprehensive vulnerability reporting uses a 7-Question Gate for severity validation and includes PII redaction protocols. This ensures reports meet program standards while protecting sensitive data and providing AI-generated PoCs.

Does this bug bounty workflow support specialized vulnerability types like IDOR, SSRF, and OAuth bypass?▼

The workflow delivers focused vulnerability identification with deep dives into specific security domains including IDOR, SSRF, XSS, authentication bypass, and OAuth, providing specialized analysis for each vulnerability class.

What is cluster hunting and when should I use it for security research?▼

Cluster hunting is an advanced bug hunting technique that groups related vulnerabilities across a target's infrastructure. It is used during systematic vulnerability analysis to identify patterns and expand attack surface coverage efficiently.

Related Skills

Explore More Software Engineering Skills→
rafaelcallejarafaelcalleja
2

ffuf-web-fuzzing

Fuzz web resources to discover hidden directories, files, and subdomains.

Community
Advanced
Kisilev13Kisilev13

report-writing

Generate bug bounty reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.

Community
Advanced
SnailSploitSnailSploit
2.9k

bug-identification

Identify software vulnerabilities through static analysis, dynamic analysis, fuzzing, and AI-assisted techniques.

Community
Advanced
jcastillotxjcastillotx

Ethical Hacking Methodology

Execute a complete penetration testing lifecycle from reconnaissance to reporting.

Community
Advanced