security-bounty-hunter

What problem does it solve?

This Skill provides a focused methodology to discover, triage, and prepare responsible-disclosure-grade reports for remotely reachable, exploitable security issues that qualify for bounty programs.

Core Features & Use Cases

• Focused bounty hunting: Prioritize remotely reachable, user-controlled attack paths and discard low-value or out-of-scope findings commonly rejected by bounty programs.
• Triage-to-PoC workflow: Check scope, locate real entrypoints, perform static triage, trace data flow to sinks, confirm exploitability, and produce minimal safe proofs of concept.
• Use Case: Prepare a HackerOne or Huntr submission by proving an SSRF or auth bypass is reachable, exploitable, and not already covered by an existing advisory.

Quick Start

Analyze the repository for remotely reachable exploitable issues and produce a concise bounty-ready report with a minimal safe proof of concept and affected versions.