Public Skills Builder banner
shuvonsec shuvonsec

Public Skills Builder

Security community

Description

Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

Public Skills Builder

**Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — no private reports needed.**

Feed it 500+ public bug bounty reports. Get back 18 ready-to-use Claude Code skill files — one per vulnerability class — packed with real-world techniques, payloads, and bypass patterns.

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE) [![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://python.org) [![Stars](https://img.shields.io/github/stars/shuvonsec/public-skills-builder?style=social)](https://github.com/shuvonsec/public-skills-builder/stargazers)

[Quick Start](#quick-start) · [Output](#output) · [Sources](#sources) · [Usage](#usage)


Why Use This

Bug bounty reports are the best training data for hunting. This tool reads hundreds of disclosed HackerOne reports and community writeups, then uses Claude to distill them into structured skill files you can load directly into Claude Code.

No private reports required. Everything comes from public data.


Quick Start

git clone https://github.com/shuvonsec/public-skills-builder
cd public-skills-builder

python3 -m venv .venv
source .venv/bin/activate
pip install anthropic requests

cp .env.example .env
# Edit .env — add your ANTHROPIC_API_KEY

Sources

Source Auth needed What it fetches
HackerOne public feed None Publicly disclosed reports
HackerOne REST API H1 API key Your own resolved reports
GitHub writeup repos None (optional token) 1,20