skills.rest
PAISHU-AI
PAISHU-AICOMMUNITY
Explore all skills by this author →
GitHub

security-bounty-hunter

Detect remotely reachable security vulnerabilities in code repositories.

Updated Aug 23, 2026
Search Tags:#security#vulnerability#repository#exploit#bounty
One-click install
npx skills add https://github.com/PAISHU-AI/PAI-zong-NB --skill security-bounty-hunter-paishu-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-bounty-hunter
Source: https://github.com/PAISHU-AI/PAI-zong-NB/tree/main/skills/security-bounty-hunter
Command: npx skills add https://github.com/PAISHU-AI/PAI-zong-NB --skill security-bounty-hunter-paishu-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill is designed to identify exploitable security issues in repositories, aiding in responsible disclosure or bounty submission.

Core Features & Use Cases

  • Exploitability Assessment: Identifies vulnerabilities that are remotely reachable and could lead to real-world exploits.
  • Targeted Vulnerability Scanning: Focuses on security issues like SSRF, auth bypass, remote code execution, SQL injection, and command injection.
  • Triage and Reporting: Assists in preparing reports for bounty submissions, with a clear structure for describing vulnerabilities.

Quick Start

Scan the 'example-repo' for potential security vulnerabilities using the security-bounty-hunter skill.

Frequently Asked Questions about security-bounty-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find exploitable security vulnerabilities in a code repository?▼

Security vulnerability scanning identifies remotely reachable flaws in a code repository by prioritizing real-world exploit potential. It focuses on detecting patterns like SSRF, auth bypass, and code execution paths using static analysis tools and code inspection.

What types of security vulnerabilities are most valuable for bug bounty submissions?▼

Bounty-worthy vulnerabilities include SSRF, auth bypass, remote code execution, SQL injection, and command injection. These issues are targeted because they are remotely reachable and demonstrate real-world exploit potential.

How do I assess if a code execution path is remotely reachable for a bounty report?▼

Assessing remote reachability of code execution paths requires static analysis and code inspection to trace inputs. You verify the vulnerability is exploitable remotely, prioritizing paths demonstrating real-world exploit potential for bounty submissions.

Can I automate triage and reporting for SQL injection and SSRF vulnerabilities?▼

Automating triage and reporting for SQL injection and SSRF vulnerabilities assists in preparing structured bounty submission reports. It clearly describes the remotely reachable security issues found during static analysis and code inspection of the repository.

Do I need static analysis tools to detect auth bypass and command injection?▼

Static analysis tools and code inspection capabilities are required to detect auth bypass and command injection. They identify remotely reachable security vulnerabilities and assess their real-world exploit potential within code repositories.

Related Skills

Explore More Software Engineering Skills→
KuassKuass
1

source-code-research

Fetch and analyze package source code from npm, PyPI, crates, and GitHub.

Community
Advanced
grivera82grivera82

report-writing

Standardize vulnerability reports with structured sections and CVSS scoring.

Community
Advanced
jassicsjassics
6

sast-review

Triage SAST findings to rank true vulnerabilities and suggest remediation.

Community
Advanced
offers-pngoffers-png

security_scan

Run dependency, SAST, and HoundDog scans in parallel and report vulnerabilities.

Community
Advanced