skills.rest
bpnrockstar
bpnrockstarCOMMUNITY
Explore all skills by this author →
GitHub

evidence-hygiene

Sanitize and redact sensitive data from bug bounty evidence.

Updated Jul 1, 2026
Search Tags:#bug bounty#PII protection#evidence sanitization#HAR file analysis#cookie redaction
One-click install
npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill evidence-hygiene-bpnrockstar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: evidence-hygiene
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/evidence-hygiene
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill evidence-hygiene-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill ensures evidence captured during bug-bounty submissions is sanitized, private, and suitable for triage, reducing false positives and protecting user data.

Core Features & Use Cases

  • Cookie Redaction: Masks sensitive cookies to prevent session breaches.
  • PII Black-Bar: Protects personally identifiable information in screenshots and HAR files.
  • HAR Sanitization: Strips sensitive headers and cookies from HAR files.
  • Screenshot Hygiene: Standardizes screenshot capture for clarity and consistency.
  • Post-Submission Hygiene: Provides guidance on post-submission evidence management.

Quick Start

Run evidence-hygiene to sanitize and prepare your bug bounty submission evidence before submission.

Frequently Asked Questions about evidence-hygiene

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I sanitize a HAR file for a bug bounty submission?▼

Redacting cookies in bug bounty evidence prevents session hijacking by masking sensitive session tokens before submission. This practice protects user privacy and maintains the integrity of the security testing data.

What is the best way to redact PII from web application security testing evidence?▼

The best way to redact PII from web application security testing evidence is to apply a black-bar masking technique across screenshots and HAR files. This standardizes evidence capture while protecting personally identifiable information.

How does cookie redaction work in bug bounty evidence?▼

Cookie redaction in bug bounty evidence works by masking sensitive session identifiers within HTTP requests and responses. This prevents accidental session breaches and ensures sensitive authentication data is not exposed during triage.

Do I need knowledge of HTTP protocol to sanitize bug bounty evidence?▼

Yes, you need knowledge of the HTTP protocol, cookies, and personal identifiable information to effectively sanitize bug bounty evidence. Understanding these concepts is required to accurately identify and redact sensitive data from submissions.

What are the limitations of manual evidence sanitization for bug bounty reports?▼

Manual evidence sanitization risks false positives and incomplete PII redaction if sensitive headers or cookies are overlooked in complex HAR files. Automated sanitization standardizes screenshot hygiene and ensures consistent privacy protection.

Related Skills

Explore More Software Engineering Skills→
uphiagouphiago
1.1k

evidence-hygiene

Redact session cookies and PII from bug-bounty proof-of-concept evidence.

Community
Intermediate
dparedesidparedesi
1

skill-builder

Create, evaluate, and improve Claude Skills using templates and scoring rubrics.

Community
Advanced
daishimandaishiman
6

security-reporting

Generate standardized security diagnostic reports from vulnerability findings.

Community
Intermediate
elementalsoulselementalsouls
3.3k

evidence-hygiene

Enforces redaction and sanitization of sensitive data in bug-bounty evidence submissions.

Community
Intermediate