skills.rest
chatbotkit
chatbotkitOFFICIAL
Explore all skills by this author →
WebsiteGitHub

evidence-hygiene

Redact PII and sensitive cookies from bug-bounty evidence attachments.

13|2|Updated Jun 1, 2026
Search Tags:#evidence#redaction#pii#bug-bounty#har-sanitization#cookie-redaction
One-click install
npx skills add https://github.com/chatbotkit/rook --skill evidence-hygiene-chatbotkit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: evidence-hygiene
Source: https://github.com/chatbotkit/rook/tree/main/skills/evidence-hygiene
Command: npx skills add https://github.com/chatbotkit/rook --skill evidence-hygiene-chatbotkit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Bug-bounty submissions often include sensitive data such as session cookies, user PII, and HAR content. This skill provides a disciplined approach to redaction and evidence hygiene so artifacts are safe to share while preserving verifiability.

Core Features & Use Cases

  • Redaction protocol for cookies, auth headers, and PII before capturing screenshots or HARs.
  • HAR sanitization using jq filters to strip sensitive headers and payloads.
  • Guided workflow from capture to reporting, ensuring compliance with bug-bounty hygiene standards.

Quick Start

Use evidence-hygiene to prepare a sanitized PoC by redacting sensitive data and exporting cleaned artifacts.

Frequently Asked Questions about evidence-hygiene

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I redact sensitive cookies and PII from bug-bounty evidence before sharing?▼

Sanitize HAR files for bug-bounty submissions by applying jq filters to strip sensitive headers and payloads. This process removes PII and session data while retaining the structural metadata needed for triagers to verify the vulnerability.

What is the best way to sanitize a HAR file for a bug-bounty submission?▼

Sanitize HAR files for bug-bounty submissions by applying jq filters to strip sensitive headers and payloads. This process removes PII and session data while retaining the structural metadata needed for triagers to verify the vulnerability.

Do I need to redact auth headers before capturing screenshots for a PoC?▼

Bug-bounty evidence hygiene is the practice of redacting PII, session cookies, and sensitive headers from artifacts like HARs and screenshots. It is necessary when sharing PoCs with triagers to prevent leaking sensitive user or session data while maintaining verifiable proof.

What is evidence hygiene for bug-bounty reports and when do I need it?▼

Bug-bounty evidence hygiene is the practice of redacting PII, session cookies, and sensitive headers from artifacts like HARs and screenshots. It is necessary when sharing PoCs with triagers to prevent leaking sensitive user or session data while maintaining verifiable proof.

Can I preserve verifiable metadata while stripping sensitive payloads from a HAR?▼

Limitations of manual bug-bounty evidence redaction include missing embedded PII or session cookies within complex HAR structures and screenshots. A guided workflow enforcing jq sanitization and masking guidelines mitigates these risks to produce defense-ready artifacts.

Related Skills

Explore More Content & Communication Skills→
sseshachalasseshachala

evidence-hygiene

Redact cookies and PII from bug-bounty screenshots, HAR files, and transcripts.

Community
Intermediate
zebbernzebbern
5

retest-vuln

Automates verification of vulnerability fixes through structured retest workflows.

Community
Advanced
ricardorochericardoroche
2

pii-redaction

Redact PII from logs, error messages, and debug output.

Community
Basic
AuthulaAuthula
264

handoff

Generate a handoff document from conversation context with sensitive data redacted.

Official
Basic