shuvonsec

Public Skills Builder — Security skill for Claude Code

Security community

Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed.

How to install Public Skills Builder

This entry records only its repository, not the path inside it, so there is no exact command to give. Open shuvonsec/public-skills-builder and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Public Skills Builder does

Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed.

Alternatives in Security

/web3 Audit — Smart contract security audit using the 10-bug-class methodology 927 ★
Review Artifact — Creates one polished, self-contained HTML artifact from review findings, audit notes, PR feedback, code review 652 ★
Bountyforge — All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T 399 ★

README

Public Skills Builder

**Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — no private reports needed.**

Feed it 500+ public bug bounty reports. Get back 18 ready-to-use Claude Code skill files — one per vulnerability class — packed with real-world techniques, payloads, and bypass patterns.

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE) [![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://python.org) [![Stars](https://img.shields.io/github/stars/shuvonsec/public-skills-builder?style=social)](https://github.com/shuvonsec/public-skills-builder/stargazers)

[Quick Start](#quick-start) · [Output](#output) · [Sources](#sources) · [Usage](#usage)

Why Use This

Bug bounty reports are the best training data for hunting. This tool reads hundreds of disclosed HackerOne reports and community writeups, then uses Claude to distill them into structured skill files you can load directly into Claude Code.

No private reports required. Everything comes from public data.

Quick Start

git clone https://github.com/shuvonsec/public-skills-builder
cd public-skills-builder

python3 -m venv .venv
source .venv/bin/activate
pip install anthropic requests

cp .env.example .env
# Edit .env — add your ANTHROPIC_API_KEY