skills.rest
thangvawn
thangvawnCOMMUNITY
Explore all skills by this author →
GitHub

security-bounty-hunter

Detect remotely exploitable security vulnerabilities in software repositories.

Updated Apr 6, 2026
Search Tags:#static analysis#vulnerability scanning#security research#bounty hunting#repository security
One-click install
npx skills add https://github.com/thangvawn/agent_financial --skill security-bounty-hunter-thangvawn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-bounty-hunter
Source: https://github.com/thangvawn/agent_financial/tree/main/.cursor/skills/security-bounty-hunter
Command: npx skills add https://github.com/thangvawn/agent_financial --skill security-bounty-hunter-thangvawn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires semgrep, Bandit, sqlmap, pytesseract, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill aids in discovering security vulnerabilities in repositories, focusing on issues that are remotely exploitable and qualify for bounty programs.

Core Features & Use Cases

  • Vulnerability Scanning: Detects security vulnerabilities in repositories.
  • Bounty Submission Preparation: Assists in preparing reports for bounty programs like Huntr, HackerOne.
  • Triage and Impact Assessment: Evaluates the exploitability and potential impact of identified vulnerabilities.

Quick Start

Activate the security-bounty-hunter skill to scan the current repository for potential security vulnerabilities.

Frequently Asked Questions about security-bounty-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find exploitable security vulnerabilities in a software repository?▼

To find exploitable security vulnerabilities in a software repository, use this skill to perform static analysis and vulnerability scanning. It detects real-world, remotely exploitable threats with actionable impact.

What is the best way to prepare reports for bug bounty hunting platforms?▼

The best way to prepare reports for bug bounty hunting platforms like HackerOne and Huntr is to triage identified vulnerabilities. This skill evaluates exploitability and potential impact to assist in bounty submission preparation.

Do I need Python and specific tools to scan code for remote security threats?▼

Yes, you need Python and specific security tools like Semgrep, Bandit, sqlmap, and pytesseract to scan code for remote security threats. These dependencies are required for the static analysis engine to function properly.

Can I use static analysis tools to assess the impact of a detected vulnerability?▼

Yes, you can use static analysis tools to assess the impact of a detected vulnerability. This skill triages findings by evaluating the exploitability and potential impact of identified security issues in repositories.

How does vulnerability scanning detect real-world threats for security research?▼

Vulnerability scanning detects real-world threats for security research by analyzing source code repositories to identify remotely exploitable issues. It focuses on actionable vulnerabilities that qualify for bounty programs.

Related Skills

Explore More Software Engineering Skills→
efiadmefiadm

security-scanning-hooks

Configure automated security scanning hooks with semgrep, bandit, and gitleaks.

Community
Intermediate
woxiangyangzhimaowoxiangyangzhimao
3

security-bounty-hunter

Identify exploitable vulnerabilities in code repositories and prepare bounty reports for Huntr and HackerOne.

Community
Advanced
macaughmacaugh
5

Static Vulnerability Analysis

Detects injection, memory safety and authorization flaws in multiple languages.

Community
Advanced
EntroVyxEntroVyx
3

bb-local-toolkit

Coordinate reconnaissance, vulnerability research, and exploit chaining for bug bounty hunting.

Community
Advanced