Program Scout — Development agent for Claude Code
Scouts publicly-listed HackerOne, Bugcrowd, or Intigriti bug-bounty programs likely to yield reportable findings on BOTH of bb-agent's axes — passive OSINT (leaked credentials, exposed buckets, subdom.
How to install Program Scout
Installs to ~/.claude/agents/kennyalfredo-pr-agent-program-scout.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/program-scout.md -o ~/.claude/agents/kennyalfredo-pr-agent-program-scout.md Restart Claude Code, or start a new session, for it to be picked up.
What Program Scout does
name: program-scout description: Scouts publicly-listed HackerOne, Bugcrowd, or Intigriti bug-bounty programs likely to yield reportable findings on BOTH of bb-agent's axes — passive OSINT (leaked credentials, exposed buckets, subdomain takeover) AND the active web-vuln tier (IDOR/BOLA/BFLA + injection/auth class hunters) — weighted by triage-health (will the program engage). Reads no program-owned assets — only the community-maintained arkadiyt/bounty-targets-data dump on GitHub. Writes ran
Alternatives in Development
- Review Workflow Context Budget — Reviews workflow machinery for context-window budget on three axes: always-loaded surface, load-on-demand disc 432 ★
- Valuation Analyst — Specialized agent for multi-method valuation of B3 stocks 124 ★
- Evidence Agent — Collects bounded pre-grade evidence packs for final reportable findings (HTTP via bob_http_scan; SC via family 97 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Report Writer
Bug bounty report writer. Generates professional H1/Bugcrowd/Intigriti/Immunefi reports. Impact-first writing,
Scope Agent
Extracts in-scope mobile assets (bundle IDs, package names, store URLs), testing boundaries, and exclusions fr
Program Scope Parser
Parses a HackerOne, Bugcrowd, or Intigriti program page and writes a structured scope/rules JSON to memory/pro
Report Drafter
Drafts a HackerOne/Bugcrowd-ready markdown report for a confirmed finding. Reads the candidate JSON from out/
Bounty Report Agent
Use this agent once bounty-exploit-agent has a confirmed, minimally-demonstrated finding for a bug bounty prog
Final Verifier
Round 3 verification — re-runs only REPORTABLE findings with fresh requests as final confirmation
Related Skills
Find Programs
Scout publicly-listed HackerOne, Bugcrowd, or Intigriti bug-bounty programs likely to yield reportables on bot
Claude Bug Bounty — Plugin Guide
This repo is a Claude Code plugin for professional bug bounty hunting across HackerOne, Bugcrowd, Intigriti, a
Bountyforge
All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T