triage-validation

Validate bug reports against required questions and gates.

1|Updated Jun 22, 2026
One-click install
npx skills add https://github.com/0xhaaz/bug-bounty-toolkit --skill triage-validation-0xhaaz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: triage-validation
Source: https://github.com/0xhaaz/bug-bounty-toolkit/tree/main/skills/triage-validation
Command: npx skills add https://github.com/0xhaaz/bug-bounty-toolkit --skill triage-validation-0xhaaz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive checklist and framework for validating bug reports, helping you avoid common pitfalls and improve your submissions.

Core Features & Use Cases

  • Comprehensive Validation: A 7-Question Gate, 4 pre-submission gates, and a Never Submit list ensure your reports are thorough and valid.
  • Conditional Validation: Helps you identify and validate specific bug classes like SSRF, IDOR, and XSS, with detailed chain requirements.
  • CVSS 3.1 Quick Reference: A handy guide for understanding and applying CVSS scores to your reports.

Quick Start

Start validating your bug report using the triage-validation skill.

Frequently Asked Questions about triage-validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate a bug report before submitting it?

Bug report validation involves checking submissions against a 7-Question Gate, 4 pre-submission gates, and a Never Submit list. This framework ensures all required conditions are met and helps identify common issues before you submit.

How do I apply CVSS 3.1 scores to my security bug reports?

You can apply CVSS 3.1 scores using the quick reference guide provided by the validation framework. It helps you understand and accurately append severity scores to your security bug reports during the validation process.

Do I need Python to run bug report validation scripts?

Yes, you need Python installed to run the validation scripts. The framework relies on these scripts to automatically verify that your bug report meets the required triage and security validation gates.

How do I validate specific security vulnerabilities like SSRF, IDOR, and XSS?

To validate specific security vulnerabilities like SSRF, IDOR, and XSS, the framework provides conditional validation rules. It helps you identify specific bug classes and verify their detailed chain requirements for accurate reporting.

What are the most common issues to avoid when writing a bug report?

Common issues to avoid are outlined in the framework's Never Submit list. By running the validation scripts, you can identify missing answers to the 7-Question Gate and address these pitfalls before final submission.