← 返回 Skills 市场

Bug Bounty Triage

Name: Bug Bounty Triage
Author: n8gendegen

作者 n8gendegen · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

总下载

当前安装

版本数

在 OpenClaw 中安装

/install bug-bounty-triage

功能描述

Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report p...

使用说明 (SKILL.md)

Bug Bounty Triage

A practical bug bounty triage workflow for deciding which programs, repos, and candidate findings deserve time today.

Best for: security researchers, Code4rena wardens, Sherlock auditors, HackenProof hunters, DeFi teams, and agent operators running daily bounty scans.

Search Keywords / Best Use Cases

bug bounty
bug bounty triage
bug bounty workflow
bug bounty checklist
bug bounty report template
bug bounty finding report
bounty hunter workflow
bounty target triage
vulnerability report template
security finding report
smart contract bounty
smart contract bug bounty
DeFi bounty
DeFi bug bounty
Code4rena bounty
Code4rena audit prep
Sherlock audit prep
HackenProof bounty workflow
Cantina bounty workflow
Solidity bounty triage
EVM bounty workflow
vulnerability candidate triage
audit report template
paid bug bounty skill pack
Atlas bounty skill pack

What This Free Skill Produces

Program fit score: payout, scope, friction, repo availability, PoC feasibility
Target priority queue for today
Candidate finding triage rubric
Submission-readiness checklist
Report skeleton for credible findings

Workflow

Rank active programs by payout × source access × PoC feasibility × friction.
Exclude paused/capped/blocked programs immediately.
Pick one target and build a local test harness before deep theory work.
Promote only candidates with clear impact and runnable evidence.
Draft the report only after severity and exploitability survive review.

Upgrade: Atlas Paid ZIP Packs ($49 / $150)

This free ClawHub skill is the discovery layer. If you want the ready-to-run premium workflow:

Starter — $49: triage checklist, report templates, prompt pack, and setup guide.
Pro — $150: advanced scoring rubric, bounty-readiness workspace, DeFi modules, and reusable audit sprint template.

Get the paid packs here: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=bug-bounty-triage

If this free skill helped, please star/comment on ClawHub so other bounty hunters can find it.

Guardrails

Do not submit findings without PoC evidence and responsible disclosure approval.
Do not overclaim severity before manual verification.
Never include secrets, private keys, or undisclosed live exploit details in public examples.

安全使用建议

This skill appears safe to install as a free checklist-style workflow. Be aware that it is also promotional and links to paid ZIP packs outside the reviewed artifacts; inspect any downloaded paid materials separately before running or trusting them.

功能分析

Type: OpenClaw Skill Name: bug-bounty-triage Version: 1.0.0 The skill bundle contains no executable code and consists entirely of documentation and high-level workflow instructions for bug bounty triage. It functions as a marketing 'funnel' for paid security packs (atlasagentsuite.com) but lacks any indicators of malicious intent, data exfiltration, or harmful prompt injection.

能力标签

crypto

能力评估

✓ Purpose & Capability

The skill’s content matches its stated purpose: ranking bug bounty targets, triaging candidate findings, and preparing responsible reports.

✓ Instruction Scope

Instructions are limited to workflow guidance and include guardrails against overclaiming severity, submitting without evidence, or exposing secrets.

ℹ Install Mechanism

The reviewed skill has no install spec or code, but it promotes external paid ZIP packs that are outside this review.

✓ Credentials

No binaries, environment variables, credentials, local file access, network actions, or privileged operations are requested.

✓ Persistence & Privilege

No persistence, background execution, autonomous workers, account access, or privilege escalation mechanisms are present.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install bug-bounty-triage
安装完成后，直接呼叫该 Skill 的名称或使用 /bug-bounty-triage 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial exact-match listing for bug bounty triage discovery and Atlas security ZIP funnel.

元数据

Slug bug-bounty-triage

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题