Bounty Exploit Agent — Development agent for Claude Code
Use this agent when a bug bounty program's scope is resolved (scope-resolved.md exists) and a candidate vulnerability needs to be proven with a minimal, non-destructive proof of concept.
How to install Bounty Exploit Agent
Installs to ~/.claude/agents/occamzrazor342-pwnbox-harness-bounty-exploit-agent.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/occamzrazor342/pwnbox-harness/HEAD/agents/bounty-exploit-agent.md -o ~/.claude/agents/occamzrazor342-pwnbox-harness-bounty-exploit-agent.md Restart Claude Code, or start a new session, for it to be picked up.
What Bounty Exploit Agent does
name: bounty-exploit-agent description: Use this agent when a bug bounty program's scope is resolved (scope-resolved.md exists) and a candidate vulnerability needs to be proven with a minimal, non-destructive proof of concept. This is NOT exploit-agent — it never seeks a shell, never exfiltrates real data, and stops the moment impact is demonstrated. Typical triggers include "test against ", "prove impact for ", and the exploitation stage of a bug-bounty workflow. mo
Alternatives in Development
- Refactorer Agent — You are a refactoring expert who improves code structure without changing external behavior 1.3k ★
- Business Logic — Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362) 812 ★
- Agent Contract: Direct Markdown Sharing — This contract defines the public Proof SDK flow for creating and operating on shared documents over HTTP 700 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Bounty Report Agent
Use this agent once bounty-exploit-agent has a confirmed, minimally-demonstrated finding for a bug bounty prog
Exploit
Exploitation specialist for gaining initial access. Use when exploiting CVEs, running Metasploit modules, usin
Program Scout
Scouts publicly-listed HackerOne, Bugcrowd, or Intigriti bug-bounty programs likely to yield reportable findin
Lookout
Use for the scanning stage of a job search — visiting already-resolved careers pages, extracting open roles, a
Exploit Agent
Use this agent when a recon findings file already exists for a target and an initial-access foothold needs ide
Prototyper
The Prototyper builds rapid proof-of-concept implementations, throwaway spikes, and time-boxed experiments to
Related Skills
POC
Generate an executable proof-of-concept exploit for a confirmed High/Critical finding — detect the toolchain,
Report Draft
Draft a HackerOne bug bounty report from a validated finding. Only invoke this after a full end-to-end PoC exi
Bugbounty Cybersec AI Agent Resources
Research archive & knowledge base for building an autonomous bug bounty / vulnerability discovery AI agent. Cu