skills.rest
VenTheZone
VenTheZoneCOMMUNITY
Explore all skills by this author →
GitHub

hack-scope

Analyze VDP documentation to define security assessment scope boundaries.

1|1|Updated Feb 21, 2026
Search Tags:#security#penetration testing#reconnaissance#scope#bug bounty#vdp
One-click install
npx skills add https://github.com/VenTheZone/favorite-opencode-setup --skill hack-scope
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hack-scope
Source: https://github.com/VenTheZone/favorite-opencode-setup/tree/main/skills/hack-scope
Command: npx skills add https://github.com/VenTheZone/favorite-opencode-setup --skill hack-scope

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps security professionals and bug bounty hunters quickly understand and define the scope of a security assessment or bug bounty program, preventing accidental out-of-scope testing and guiding reconnaissance efforts.

Core Features & Use Cases

  • VDP Analysis: Parses Vulnerability Disclosure Program documents to extract key details like program URLs, contact methods, and response times.
  • Scope Definition: Clearly identifies in-scope and out-of-scope assets, including domains, applications, APIs, and infrastructure.
  • Constraint Identification: Extracts critical testing constraints such as rate limits, testing windows, and disclosure timelines.
  • Attack Planning: Helps in prioritizing targets and mapping the attack surface based on the defined scope.
  • Use Case: When starting a new bug bounty on a target, use this skill to read their VDP policy, list all allowed domains and subdomains, and note any specific restrictions on testing methods.

Quick Start

Use the hack-scope skill to analyze the VDP document and outline the engagement scope.

Frequently Asked Questions about hack-scope

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I define bug bounty scope from a VDP document?▼

To define bug bounty scope, this Skill analyzes Vulnerability Disclosure Program documents to extract in-scope and out-of-scope assets, ensuring your security assessment targets only authorized domains and infrastructure.

What is attack surface mapping in penetration testing?▼

Attack surface mapping involves identifying in-scope domains, applications, and APIs extracted from VDP policies, helping you prioritize reconnaissance targets and plan compliant security testing engagements.

How do I identify testing constraints and rate limits in a VDP?▼

This Skill identifies testing constraints by parsing VDP documentation to extract critical limitations such as rate limits, testing windows, and disclosure timelines to ensure compliant engagement planning.

Can I use this for bug bounty reconnaissance on any security program?▼

Yes, you can use this for bug bounty reconnaissance on any program that provides a Vulnerability Disclosure Program document, as it parses policy text to map in-scope assets and safe harbor provisions.

What is the best way to avoid out-of-scope testing during a bug bounty?▼

The best way to avoid out-of-scope testing is to analyze the VDP documentation beforehand, clearly separating allowed targets from restricted infrastructure and noting specific testing method constraints.

Related Skills

Explore More Software Engineering Skills→
vibewatchvibewatch

fetch-url

Fetch URLs and extract readable text from HTML pages and PDFs.

Official
Intermediate
jayjpatel9717jayjpatel9717

pentest-orchestration

Automate web application penetration testing with specialized agents for reconnaissance, SSRF, and XSS.

Community
Advanced
rafaelcallejarafaelcalleja
2

ffuf-web-fuzzing

Fuzz web resources to discover hidden directories, files, and subdomains.

Community
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced