Bug Hunting banner
m4vic m4vic

Bug Hunting

Testing community

Description

Bug bounty hunting & penetration testing skills for Claude, Codex, and any agentic coding tool.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

Bug Hunting — bug bounty, penetration testing, AI powered

GitHub stars Version License: MIT GitHub forks

Bug Hunting Skill

**Bug bounty hunting & penetration testing skills for Claude, Codex, and any agentic coding tool.**

A signal-driven, structured skill package that turns a general-purpose coding agent into a disciplined web/API/mobile/cloud/AI-LLM vulnerability hunter — not by dumping a wall of technique text into context, but by routing to only what's relevant, and by making the agent actually *operate* like a hunter (working folders, hypothesis tracking, confirm-before-report), not just recite vuln classes.


What this is

Most "hacking skill" packs for AI agents are a single giant file, or dozens of files, each 300–500+ lines, loaded all at once regardless of relevance — heavy on payout tables and named bug-bounty programs, thin on the actual decision logic a hunter needs mid-recon. That's expensive on tokens and worse, it drowns the model in procedure instead of teaching it how to *think*.

This skill is built the opposite way: a tiny router at the top, six domain-specific signal tables underneath, and 70+ compact technique references that only load when a signal table actually points at them. Nothing loads until it's needed.

What it consists of

bug-hunting/
  SK