evidence-hygiene

Redact cookies and PII from bug bounty evidence files.

Updated Jun 18, 2026
One-click install
npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill evidence-hygiene-kisilev13
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: evidence-hygiene
Source: https://github.com/Kisilev13/Hermes-Agent-Workspace/tree/main/skills/evidence-hygiene
Command: npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill evidence-hygiene-kisilev13

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures that bug bounty evidence is captured and redacted in a secure and responsible manner, protecting sensitive information and maintaining the integrity of the reporting process.

Core Features & Use Cases

  • Cookie Redaction Protocol: Mask sensitive cookies and tokens to protect user sessions.
  • PII Black-Bar Protocol: Redact personally identifiable information to ensure compliance and confidentiality.
  • HAR File Sanitization: Clean up HAR files to remove sensitive information like cookies and auth tokens.
  • Burp Suite Screenshot Hygiene: Improve the appearance and security of screenshots from Burp Suite.
  • Chrome DevTools Console PoC Patterns: Provide guidelines for creating secure PoC patterns using Chrome DevTools.
  • Screenshot Capture Order Discipline: Standardize the process of capturing PoC screenshots for clarity and consistency.
  • Post-Submission Hygiene: Provide best practices for securing and managing evidence post-submission.

Quick Start

Run the 'evidence-hygiene' skill before capturing or submitting any bug bounty evidence to ensure all sensitive information is securely handled.

Frequently Asked Questions about evidence-hygiene

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I sanitize a HAR file before submitting bug bounty evidence?

To sanitize a HAR file, you must remove sensitive information like cookies and auth tokens to ensure bug bounty evidence is captured securely and privacy is maintained during submission.

What is the best way to redact PII in bug bounty reports?

The best way to redact PII is applying a black-bar protocol to mask personally identifiable information, ensuring compliance and confidentiality when handling and submitting evidence.

How do I mask sensitive cookies in Burp Suite screenshots?

To mask sensitive cookies in Burp Suite screenshots, follow cookie redaction protocols and screenshot hygiene practices to protect user sessions and improve report appearance.

What are secure PoC patterns for Chrome DevTools console?

Secure PoC patterns for the Chrome DevTools console provide guidelines for creating proof-of-concept evidence that prevents leaking sensitive data during bug bounty submissions.

What is evidence hygiene and why is it needed in bug bounty submissions?

Evidence hygiene is the discipline of securely capturing and redacting bug bounty evidence. It is needed to protect sensitive information and maintain the integrity of the reporting process.

What are the best practices for post-submission evidence management?

Post-submission hygiene involves securely managing and disposing of evidence after submitting a bug bounty report, protecting sensitive data from exposure after the engagement ends.