shaniidev/bug-reaper
Developer toolsこのページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る
Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesWeHack.
概要
Structured web2 bug bounty AI skill — 18 vulnerability classes, 4 bug bounty platforms, zero AI slop. Compatible with OpenClaw, Cursor, Claude Code, Antigravity, and Windsurf. BugReaper is an Agent Skill that turns any compatible AI agent into a disciplined web2 bug bounty hunter. It enforces evidence-based validation, simulates real triage for HackerOne, Bugcrowd, Intigriti, and YesWeHack, and chains low-severity bugs into critical findings. Every finding requires a working PoC before it gets reported. The Agent Skills format became an open standard in December 2025. BugReaper installs into all compatible agents without modification. — each with confirmation payloads, bypass techniques, evidence requirements, and "do not report" rules that reflect real triage patterns. The skill auto-triggers when you mention bug bounty, pentest, find vulnerabilities, or any vulnerability class name in your agent conversation. (references/recon.
README
以下は原文 README の抜粋です。原文を見る。
BugReaper
Structured web2 bug bounty AI skill — 18 vulnerability classes, 4 bug bounty platforms, zero AI slop. Compatible with OpenClaw, Cursor, Claude Code, Antigravity, and Windsurf.
BugReaper is an Agent Skill that turns any compatible AI agent into a disciplined web2 bug bounty hunter. It enforces evidence-based validation, simulates real triage for HackerOne, Bugcrowd, Intigriti, and YesWeHack, and chains low-severity bugs into critical findings. Every finding requires a working PoC before it gets reported.
Agent Compatibility
| Agent | Support | Skills Directory |
|---|---|---|
| OpenClaw | ✅ Native | Install via ClawHub |
| Cursor | ✅ Native | .cursor/skills/bug-reaper/ |
| Claude Code | ✅ Native | .claude/skills/bug-reaper/ |
| Antigravity | ✅ Native | .agents/skills/bug-reaper/ |
| Windsurf | ✅ Native | Skills directory |
| Goose | ✅ Supported | Skills directory |
The Agent Skills format became an open standard in December 2025. BugReaper installs into all compatible agents without modification.
What’s Inside
bug-reaper/
├── SKILL.md # Agent trigger + 4-phase workflow
├── references/
│ ├── recon.md # 7-phase recon methodology
│ ├── audit-rules.md # Strict evidence requirements
│ ├── exploit-validation.md # Input → sink tracing
│ ├── false-positive-elimination.md # Adversarial FP checklist
│ ├── severity-guide.md # CVSS scoring + platform tier map
│ ├── waf-bypass.md # 15 WAF products, 10 bypass techniques
│ ├── chaining.md # 8 chain templates (P3 → P1 escalation)推奨ツール
別のキーワードを試すか、フィルタを外してください。
インストール
npx skillfish add shaniidev/bug-reaper