scope-check

Validate domains, IPs, and CIDR ranges against bug bounty scope definitions.

5|3|Updated Apr 10, 2026
One-click install
npx skills add https://github.com/zebbern/termstack --skill scope-check-zebbern
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scope-check
Source: https://github.com/zebbern/termstack/tree/main/.github/skills/scope-check
Command: npx skills add https://github.com/zebbern/termstack --skill scope-check-zebbern

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Validate targets against bug bounty program scope, verify domain/IP ownership, check wildcard rules, and identify out-of-scope exclusions to prevent invalid or unsafe testing.

Core Features & Use Cases

  • Scope definition parsing for in-scope and out-of-scope domains and IPs.
  • Domain ownership and DNS checks to confirm testability.
  • Wildcard and CIDR evaluation to handle complex target sets.
  • Pre-test validation for discovered assets and third-party services.

Quick Start

Validate a list of targets to ensure they are in-scope and properly excluded.

Frequently Asked Questions about scope-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a domain is in scope for a bug bounty program?

To check if a domain is in scope, you validate the target against the program's scope definitions by parsing in-scope domains, verifying DNS ownership, and identifying out-of-scope exclusions. This prevents wasted pentests on invalid targets.

How do I validate wildcard and CIDR ranges for bug bounty testing?

Validating wildcard and CIDR ranges involves evaluating complex target sets against bug bounty scope rules to confirm testability. This ensures broad IP ranges and wildcard domains are safely included or excluded before testing begins.

What is a pre-test scope validation check for discovered assets?

A pre-test scope validation check confirms whether discovered assets, third-party services, and IP ranges conform to bug bounty scope. It parses scope definitions and applies DNS checks to prevent unsafe or unauthorized testing.

Does bug bounty scope validation support IP address and domain ownership verification?

Yes, bug bounty scope validation supports domain ownership and DNS checks to confirm testability. It verifies IP addresses and domains to ensure you have explicit authorization before performing any pentesting activities.

What are the limitations of automated scope definition parsing for bug bounty targets?

Automated scope definition parsing provides deterministic guidance for in-scope and out-of-scope targets but relies on accurate scope definitions. It applies basic risk flags and cannot replace manual legal verification of program boundaries.