security-bounty-hunter
security bounty hunter
What it does
- Scanning a repository for exploitable vulnerabilities
- Preparing a Huntr, HackerOne, or similar bounty submission
- Triage where the question is "does this actually pay?" rather than "is this theoretically unsafe?"
- Local-only pickle.loads, torch.load, or equivalent with no remote path
- eval() or exec() in CLI-only tooling
- shell=True on fully hardcoded commands
- Missing security headers by themselves
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
security-bounty-hunter FAQ
What does the security-bounty-hunter skill do?
Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings. Scanning a repository for exploitable vulnerabilities Preparing a Huntr, HackerOne, or similar bounty submission
How do I install security-bounty-hunter?
Run: npx -y skills add https://github.com/affaan-m/everything-claude-code --skill security-bounty-hunter --agent claude-code — the source lives at github.com/affaan-m/everything-claude-code.
Maintain security-bounty-hunter?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[security-bounty-hunter on getagentictools](https://getagentictools.com/skills/affaan-m-everything-claude-code-security-bounty-hunter?ref=badge) npx agentictools info skills/affaan-m-everything-claude-code-security-bounty-hunter The second line is the CLI lookup for this page — handy in READMEs and docs.
