version-tracker-add-target

Adds bug bounty targets with assets and version sources to a tracking database.

1|Updated Aug 11, 2026
One-click install
npx skills add https://github.com/Maybe4a6f7365/agentic-bug-bounty-framework --skill version-tracker-add-target-maybe4a6f7365
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: version-tracker-add-target
Source: https://github.com/Maybe4a6f7365/agentic-bug-bounty-framework/tree/main/version-tracker/skills/version-tracker-add-target
Command: npx skills add https://github.com/Maybe4a6f7365/agentic-bug-bounty-framework --skill version-tracker-add-target-maybe4a6f7365

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually registering new bug bounty targets and their version-checking sources in a tracking database is error-prone and can create duplicate asset rows, causing redundant polling. This Skill creates target, asset, and version_source rows in one step with built-in deduplication. ## Core Features & Use Cases - One-step target registration: Creates the target row, asset rows per attack vector, target_asset junction rows, and version_source entries with the correct source_type, check_method, and config. - Structural deduplication: Reuses existing asset rows matched on (vector_type, canonical_identifier) so the same repo tracked under multiple targets is polled only once. - Custom version sources: Supports inserting custom checkers via SQL, with a template at checkers/custom/_template.py. - Use Case: After importing program scope, you discover a new GitHub org worth monitoring. Run the helper script to register the target, normalize the canonical identifier to owner/repo, and attach version sources in a single pass. ## Quick Start Ask the assistant to add a new bug bounty target to the version tracker by running the add_target.py helper script with the target's GitHub org or Play Store link.

Frequently Asked Questions about version-tracker-add-target

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add a new bug bounty target to version tracking?

Run the helper script at scripts/add_target.py interactively, or insert rows directly via SQL. The process creates the target row, asset rows per attack vector, junction rows, and version_source entries in one step.

How does asset deduplication work when tracking the same repo under multiple targets?

Before creating an asset, the workflow queries for an existing row matching vector_type and canonical_identifier. If found, it reuses that asset_id and only creates a target_asset junction row, so the repo is polled once.

What format should GitHub identifiers use when adding a target?

GitHub canonical identifiers must be normalized to owner/repo without the https://github.com/ prefix. Android package names are case-sensitive and must be entered exactly.

Can I add custom version checkers for unsupported sources?

Yes. Insert a version_source row with source_type 'custom' and your check_method name, then place the checker script at checkers/custom/. Copy the template at checkers/custom/_template.py and implement the check(config) function.

Why do version checks fail on Akamai-protected websites?

Bot walls block fetch requests from the checking host, so css_selector or api sources fail. Run a pre-flight probe before committing the source, and if blocked, use indirect signals like Play Store, App Store, or RSS feeds instead.