skills.rest
shaniidev
shaniidevCOMMUNITY
Explore all skills by this author →
𝕏@ParagonPigeonGitHub

bug-reaper

Automates web2 bug bounty hunting with recon, audit, validation, and reporting stages.

66|10|Updated Feb 21, 2026
Search Tags:#AI agent#web application#vulnerability analysis#security assessment#bug bounty
One-click install
npx skills add https://github.com/shaniidev/bug-reaper --skill bug-reaper
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bug-reaper
Source: https://github.com/shaniidev/bug-reaper/tree/main
Command: npx skills add https://github.com/shaniidev/bug-reaper --skill bug-reaper

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, json, re, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill empowers AI agents to excel in web2 bug bounty hunting, providing them with structured workflows and methodologies to identify and validate vulnerabilities.

Core Features & Use Cases

  • Structured Workflow: Offers a 4-phase workflow (Recon, Audit, Validate, Report) for thorough bug bounty hunting.
  • Vulnerability Coverage: Covers 18 vulnerability classes and 4 bug bounty platforms (HackerOne, Bugcrowd, Intigriti, YesWeHack).
  • Agent Compatibility: Compatible with popular AI agents like OpenClaw, Cursor, Claude Code, Antigravity, and Windsurf.
  • Use Case: Imagine an AI agent is analyzing a web application for potential vulnerabilities. This Skill would guide the agent through the process, helping it identify and validate vulnerabilities and generate platform-specific reports.

Quick Start

Use the bug-reaper skill to start a bug bounty hunting session on a web application.

Frequently Asked Questions about bug-reaper

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate web application vulnerability analysis for bug bounty programs?▼

Automate web application vulnerability analysis by guiding AI agents through a structured 4-phase workflow: recon, audit, validation, and reporting. This process uses Python scripts to handle scope analysis and generate platform-specific reports for bug bounty hunting.

Can I use AI agents to generate HackerOne or Bugcrowd bug bounty reports?▼

Yes, AI agents can generate bug bounty reports tailored for HackerOne, Bugcrowd, Intigriti, and YesWeHack. The reporting phase automatically formats vulnerability validation results into platform-specific outputs required by these bug bounty platforms.

What is the structured workflow for AI agent-driven web security assessments?▼

The structured workflow for AI agent-driven web security assessments consists of four phases: recon, audit, validate, and report. This methodology covers 18 vulnerability classes to ensure thorough security analysis and validated findings.

Does this bug bounty hunting methodology work with Cursor and Claude Code?▼

Yes, this bug bounty hunting methodology is compatible with popular AI agents including Cursor, Claude Code, OpenClaw, Antigravity, and Windsurf. It requires these compatible AI agents to execute the Python scripts for HTTP requests and scope analysis.

Do I need Python libraries to perform AI agent vulnerability validation?▼

Yes, you need Python libraries including requests, json, and re to perform AI agent vulnerability validation. These dependencies handle HTTP requests and data processing during the security assessment and report generation phases.

Related Skills

Explore More Software Engineering Skills→
ivegamsftivegamsft

penetration-testing

Automate penetration testing workflows with Python libraries for vulnerability assessment.

Community
Advanced
n4igmen4igme

report-writing

Generate standardized bug bounty vulnerability reports with CVSS scoring.

Community
Advanced
rafaelcallejarafaelcalleja
2

ffuf-web-fuzzing

Fuzz web resources to discover hidden directories, files, and subdomains.

Community
Advanced
Adam-GuerinAdam-Guerin
1

web-security-testing

Automate web application security testing against OWASP Top 10 vulnerabilities.

Community
Advanced