Enforce a pre-submission exploit verification gate for vulnerability reports.
npx skills add https://github.com/AshtonVaughan/bountyhound --skill exploit-gate
Please help me install this Agent Skill. Skill: exploit-gate Source: https://github.com/AshtonVaughan/bountyhound/tree/main/bountyhound/skills/exploit-gate Command: npx skills add https://github.com/AshtonVaughan/bountyhound --skill exploit-gate
Pre-submission exploit verification gate ensures only verified and evidence-backed vulnerability reports proceed to write or submit.
Start by initiating the gate evaluation for a vulnerability report and complete the evidence checklist before submission.
High-intent search queries and answers about installing and using this skill.
A pre-submission exploit verification gate ensures only evidence-backed vulnerability reports proceed to submission. It enforces an evidence checklist, policy checks, and claim protocols to guide analysts and prevent unverified claims from being reported.
To verify vulnerability evidence before submitting, complete an evidence checklist covering server-side, browser-dependent, blind/OOB, and victim-interaction proof. Run a pre-report verification scan to audit facts and confirm the chain of verification.
If a WAF blocks your exploit, the gate decision matrix surfaces it as a non-final WAF-BLOCKED status for user review. This post-gate workflow ensures you review the block before proceeding rather than submitting an incomplete report.
For blind or out-of-band vulnerability proof in responsible disclosure, the evidence checklist requires specific OOB proof requirements. The gate evaluates these claims and assigns statuses like PROVEN or NEEDS-PROOF to ensure proper verification before submission.
Yes, the exploit gate includes a Program Policy Check to ensure compliance with scoping and allowed tests. This prevents analysts from submitting reports that violate bug bounty program rules during the pre-submission process.
The vulnerability gate uses a Claim Protocol that always asks the user first before claiming resources or proceeding with escalations. This anti-sycophancy protocol accommodates new evidence or corrections, ensuring user control over security testing actions.
freire19Develop proof-of-concept exploit plans from vulnerability findings and CVE research.
ajtazerValidate bug bounty findings through sequential gate checks and evidence requirements.
giosuetedeschi-specDetect and exploit XSS and HTML injection vulnerabilities in web applications.
anderson-0Identify and verify security vulnerabilities in applications, APIs, and codebases.
