Manage bug bounty credentials across targets with token-based authentication flows.
npx skills add https://github.com/AshtonVaughan/bountyhound --skill creds-ashtonvaughan
Please help me install this Agent Skill. Skill: creds Source: https://github.com/AshtonVaughan/bountyhound/tree/main/bountyhound/skills/creds Command: npx skills add https://github.com/AshtonVaughan/bountyhound --skill creds-ashtonvaughan
This Skill helps security teams manage credentials for bug bounty targets, enabling loading, storing, refreshing, and creating test accounts to support authenticated testing.
Register accounts, store credentials in the designated .env file, and load them to initiate authenticated testing.
High-intent search queries and answers about installing and using this skill.
Manage bug bounty credentials by loading, storing, refreshing, and creating test accounts within a standardized .env format to support authorized testing workflows across targets. This approach streamlines re-authentication and securely handles token-based authentication flows.
Automate token refresh cycles by applying credential workflows that handle token-based authentication flows automatically. This ensures your authenticated testing sessions remain active without manual re-authentication interruptions during long testing periods.
Yes, you can use .env files to handle multi-user IDOR scenarios by storing multiple test account credentials and applying memory identity references. This allows you to quickly switch between authenticated user contexts during authorization testing.
Bootstrap test accounts by registering new users and storing their credentials in the designated .env file. You can then load these credentials to immediately initiate authenticated testing and accelerate your authorized workflow on the target.
You need to use a defined .env format for storing bug bounty credentials. This enforces a standardized structure for environment-driven workflows, ensuring secure and consistent credential loading across your testing setup.
B0yZ4kr14Initialize or refine a project's Security Constitution at `.specify/memory/security_constitution.md`.
trilwuIdentify and exploit API security weaknesses across REST and GraphQL endpoints.
riparinoIdentifies and assesses OWASP Top 10-style SQL injection vulnerabilities in web applications.
kentojeRetrieve Aircall staging JWT tokens and set DASHBOARD_JWT_TOKEN via fish script.
