skills.rest
vrcms
vrcmsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-bounty-hunter

Identify and validate remotely reachable exploitable security vulnerabilities in a repository.

1|Updated Apr 6, 2026
Search Tags:#security#vulnerability#triage#pentesting#cwe#bounty
One-click install
npx skills add https://github.com/vrcms/everything-qwen-code --skill security-bounty-hunter-vrcms
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-bounty-hunter
Source: https://github.com/vrcms/everything-qwen-code/tree/main/.qwen/skills/security-bounty-hunter
Command: npx skills add https://github.com/vrcms/everything-qwen-code --skill security-bounty-hunter-vrcms

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps developers and security researchers filter out noisy, non-exploitable findings to focus exclusively on high-impact, remotely reachable vulnerabilities that qualify for real-world bug bounty programs.

Core Features & Use Cases

  • Vulnerability Triage: Automatically prioritizes remotely reachable attack paths like SSRF, SQL injection, and RCE.
  • Bounty-Ready Reporting: Provides a structured template for documenting findings to meet the standards of platforms like HackerOne or Huntr.
  • Use Case: Use this skill when auditing a web application to quickly identify and document a critical authentication bypass that is actually exploitable from the network boundary.

Quick Start

Use the security-bounty-hunter skill to scan the current repository for remotely reachable vulnerabilities and generate a professional report.

Frequently Asked Questions about security-bounty-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify remotely reachable vulnerabilities like SSRF and SQL injection in a repository?▼

To identify remotely reachable vulnerabilities like SSRF and SQL injection, the skill scans the repository to filter out low-signal local-only patterns, validating exploitable attack vectors for responsible disclosure or bounty submission.

What is the best way to triage security findings for bug bounty programs?▼

The best way to triage security findings for bug bounty programs is to automatically prioritize high-impact, remotely reachable attack paths like RCE over noisy, non-exploitable findings to meet real-world program standards.

How do I generate a proof-of-concept exploit for a verified security bug?▼

To generate a proof-of-concept exploit for a verified security bug, the skill requires adherence to specific bounty program scopes and produces minimal PoC exploits alongside structured documentation for verified findings.

Can I use this skill to document findings for platforms like HackerOne or Huntr?▼

Yes, you can use this skill to document findings for platforms like HackerOne or Huntr, as it provides a structured reporting template specifically designed to meet the standards of real-world bug bounty programs.

Does this vulnerability triage approach filter out local-only security patterns?▼

Yes, this vulnerability triage approach filters out local-only security patterns, focusing exclusively on high-impact, remotely reachable network boundary attack vectors such as SSRF, SQL injection, and remote code execution.

Related Skills

Explore More Software Engineering Skills→
VenTheZoneVenTheZone
1

hack-scope

Analyze VDP documentation to define security assessment scope boundaries.

Community
Intermediate
timequitytimequity
6

security-check

Scan generated code for OWASP vulnerabilities and produce security reports.

Official
Advanced
cmndcntrlcybercmndcntrlcyber
3

hunt-rce

Detect and exploit remote code execution vulnerabilities in applications.

Community
Advanced
woxiangyangzhimaowoxiangyangzhimao
3

security-bounty-hunter

Identify exploitable vulnerabilities in code repositories and prepare bounty reports for Huntr and HackerOne.

Community
Advanced