Scope — Development skill for Claude Code
Check if a target asset is in scope for the program before hunting or submitting.
How to install Scope
Installs to ~/.claude/skills/mikacr1138-claude-bug-bounty-scope/SKILL.md
mkdir -p ~/.claude/skills/mikacr1138-claude-bug-bounty-scope && curl -fsSL https://raw.githubusercontent.com/Mikacr1138/claude-bug-bounty/HEAD/commands/scope.md -o ~/.claude/skills/mikacr1138-claude-bug-bounty-scope/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Scope does
description: Check if a target asset is in scope for the program before hunting or submitting. Reads program scope page, checks asset against in-scope and out-of-scope lists, verifies the asset is owned by the target organization. Usage: /scope
/scope
Verify an asset is in scope before hunting or submitting a finding.
Why This Matters
Out-of-scope reports are immediately closed. Testing out-of-scope assets can get you banned. Always check scope BEFORE the first request.
Alternatives in Development
- Clean Worktree (Interactive) — Interactive cleanup of worktrees: lists merged/stale branches and asks confirmation before deleting 25.5k ★
- /hunt — Active vulnerability hunting on a target 1.8k ★
- Grok Files — List, prune, or gc Grok (xAI) uploaded files 135 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
/scope
Verify an asset is in scope before hunting or submitting a finding.
Engage
Start a new engagement for a target — verifies scope, creates evidence directories, and launches recon agent
Unity Fix
Diagnoses and fixes a Unity bug — reads console errors, checks common causes, applies targeted fix, verifies v
Emit
Generate a standalone, org-owned Claude Code plugin (the org's agent harness) from .forge.org.yaml. Reads the
0x002132 Skills Bugbounty Hunt Auth Bypass
Hunting skill for auth bypass vulnerabilities. Built from 4 public bug bounty reports. Use when hunting auth b
0x002132 Skills Bugbounty Hunt Business Logic
Hunting skill for business logic vulnerabilities. Built from 7 public bug bounty reports. Use when hunting bus
Related Agents
Ownership Verifier
Given an asset (S3/GCS/Azure bucket name, subdomain, or IP) and a program slug, verifies whether the asset bel
Targets
Targets pipeline reviewer. Use when verifying target dependencies are correct, dynamic branching is sound, for
Exploit Agent
Use this agent when a recon findings file already exists for a target and an initial-access foothold needs ide