security-bounty-hunter

Identify remote security vulnerabilities and exploit paths in code repositories.

2|Updated Apr 14, 2026

Search Tags:#security #vulnerability #repository #code audit #bounty

Ready to run

npx skills add https://github.com/klu-dev/porting-ecc-to-vscode --skill security-bounty-hunter-klu-dev

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-bounty-hunter
Source: https://github.com/klu-dev/porting-ecc-to-vscode/tree/main/.github/skills/security-bounty-hunter
Command: npx skills add https://github.com/klu-dev/porting-ecc-to-vscode --skill security-bounty-hunter-klu-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of finding security vulnerabilities in repositories, enabling responsible disclosure and bounty submission.

Core Features & Use Cases

Vulnerability Scanning: Efficiently scan repositories for exploitable security issues.
Bounty Submission: Prepare comprehensive reports for bounty programs like Huntr, HackerOne.
Use Case: Quickly identify potential security holes in your codebase and create a detailed report for a bounty program.

Quick Start

Use the 'security-bounty-hunter' skill to scan your codebase for security vulnerabilities.

Frequently Asked Questions about security-bounty-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find exploitable security vulnerabilities in a code repository?▼

To find exploitable security vulnerabilities in a code repository, you can use this Skill to perform static analysis triage and identify remote exploit paths that lead to real-world impacts. It requires manual analysis to validate potential security holes.

How do I prepare a security vulnerability report for a bounty program?▼

To prepare a security vulnerability report for a bounty program, this Skill streamlines identifying exploitable issues in your codebase and helps formulate comprehensive reports suitable for submission to platforms like Huntr and HackerOne.

What is the best way to scan a codebase for bounty-worthy security issues?▼

The best way to scan a codebase for bounty-worthy security issues is using static analysis as a triage input to identify remote exploit paths. This Skill focuses on finding vulnerabilities that enable responsible disclosure and bounty submission.

Does this vulnerability scanner automatically submit findings to bounty programs?▼

No, this vulnerability scanner does not automatically submit findings to bounty programs. It uses static analysis as a triage input and requires manual analysis and validation to confirm exploit paths before you prepare a report for bounty submission.

Can I use this tool to audit any code repository for security holes?▼

Yes, you can use this tool to audit code repositories for security holes. It is designed to identify remote, bounty-worthy security vulnerabilities by tracing exploit paths, though it requires manual validation to confirm real-world impacts.

Why does finding security vulnerabilities require manual analysis after static scanning?▼

Finding security vulnerabilities requires manual analysis after static scanning because automated triage only identifies potential issues. Manual validation is necessary to confirm the exploit paths and ensure the security vulnerabilities lead to actual real-world impacts.