evidence-hygiene

Enforces redaction and sanitization of sensitive data in bug-bounty evidence submissions.

3.3k|507|Updated May 5, 2026

Search Tags:#screenshots #sanitization #evidence #privacy #redaction #bug-bounty #har

Ready to run

npx skills add https://github.com/elementalsouls/Claude-BugHunter --skill evidence-hygiene-elementalsouls

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: evidence-hygiene
Source: https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/evidence-hygiene
Command: npx skills add https://github.com/elementalsouls/Claude-BugHunter --skill evidence-hygiene-elementalsouls

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Evidence capture for bug-bounty submissions often leaks cookies and PII. This guide defines redaction, privacy, and hygiene practices to ensure safe, compliant attachments.

Core Features & Use Cases

Redaction discipline: cookie, session, and other-user PII masking to protect victims and accounts.
HAR sanitization: structured removal of sensitive headers and payloads using jq scripts.
Evidence hygiene workflows: Burp Repeater/Intruder screenshot practices and DevTools discipline to avoid exposing secret data.
Use Case: when preparing PoC artifacts and reports for Bugcrowd, Intigriti, or Immunefi, this skill guides evidence handling.

Quick Start

Describe your PoC scenario in plain English and load this skill to ensure proper redaction and evidence hygiene during Bug Bounty submissions.

Frequently Asked Questions about evidence-hygiene

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I sanitize a HAR file to remove sensitive cookies and PII for bug bounty reports?▼

HAR sanitization removes sensitive headers and payloads from HTTP archives using jq scripts. This ensures your bug bounty evidence does not leak session cookies or personally identifiable information when exported from Burp Suite or DevTools.

What is evidence hygiene in the context of bug bounty PoC submissions?▼

Evidence hygiene is the practice of enforcing redaction and sanitization on PoC captures. It prevents the accidental exposure of sensitive data like session tokens and other users' PII in screenshots and report attachments submitted to platforms like Bugcrowd or Intigriti.

How do I redact cookies and session tokens in Burp Suite screenshots?▼

Redacting cookies in Burp Suite screenshots requires applying masking discipline to hide session data before capturing evidence. This workflow ensures your Repeater and Intruder PoC artifacts protect victim accounts and comply with submission privacy standards.

Can I use this evidence sanitization workflow for light-weight automation scripts?▼

Yes, the redaction and HAR sanitization practices are applicable to light-weight automation workflows. You can integrate jq scripts and cookie masking rules into your automated evidence capture pipelines to streamline triage and reporting safely.

What is the best way to prepare safe PoC attachments for Bugcrowd or Immunefi?▼

The best way to prepare safe PoC attachments is to enforce structured evidence hygiene, including HAR sanitization and cookie redaction. This approach streamlines triage by ensuring all screenshots and payloads submitted to bug bounty platforms are free of sensitive data.