evidence-hygiene

Sanitize and redact sensitive data from bug bounty evidence.

Updated Jul 1, 2026

Search Tags:#bug bounty #PII protection #evidence sanitization #HAR file analysis #cookie redaction

Ready to run

npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill evidence-hygiene-bpnrockstar

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: evidence-hygiene
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/evidence-hygiene
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill evidence-hygiene-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill ensures evidence captured during bug-bounty submissions is sanitized, private, and suitable for triage, reducing false positives and protecting user data.

Core Features & Use Cases

Cookie Redaction: Masks sensitive cookies to prevent session breaches.
PII Black-Bar: Protects personally identifiable information in screenshots and HAR files.
HAR Sanitization: Strips sensitive headers and cookies from HAR files.
Screenshot Hygiene: Standardizes screenshot capture for clarity and consistency.
Post-Submission Hygiene: Provides guidance on post-submission evidence management.

Quick Start

Run evidence-hygiene to sanitize and prepare your bug bounty submission evidence before submission.

Frequently Asked Questions about evidence-hygiene

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I sanitize a HAR file for a bug bounty submission?▼

Redacting cookies in bug bounty evidence prevents session hijacking by masking sensitive session tokens before submission. This practice protects user privacy and maintains the integrity of the security testing data.

What is the best way to redact PII from web application security testing evidence?▼

The best way to redact PII from web application security testing evidence is to apply a black-bar masking technique across screenshots and HAR files. This standardizes evidence capture while protecting personally identifiable information.

How does cookie redaction work in bug bounty evidence?▼

Cookie redaction in bug bounty evidence works by masking sensitive session identifiers within HTTP requests and responses. This prevents accidental session breaches and ensures sensitive authentication data is not exposed during triage.

Do I need knowledge of HTTP protocol to sanitize bug bounty evidence?▼

Yes, you need knowledge of the HTTP protocol, cookies, and personal identifiable information to effectively sanitize bug bounty evidence. Understanding these concepts is required to accurately identify and redact sensitive data from submissions.

What are the limitations of manual evidence sanitization for bug bounty reports?▼

Manual evidence sanitization risks false positives and incomplete PII redaction if sensitive headers or cookies are overlooked in complex HAR files. Automated sanitization standardizes screenshot hygiene and ensures consistent privacy protection.