Bug Bounty Triage

Bug bounty report triage, validation, and severity escalation. Use when the user provides a bug bounty report to validate, wants to check if a finding is submittable, needs to escalate severity for maximum payout, or says 'triage this', 'validate this report', 'escalate this', 'is this submittable', 'check this bounty report', 'max bounty', or 'will this get accepted'.

145 stars 22 forksOther

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add Sequester-AG/bug-bounty-triage --skill bug-bounty-triage

Manual install

git clone --depth 1 https://github.com/Sequester-AG/bug-bounty-triage.git /tmp/bug-bounty-triage
mkdir -p ~/.claude/skills
cp -r /tmp/bug-bounty-triage/. ~/.claude/skills/bug-bounty-triage

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# Bug Bounty Report Triage, Validation & Severity Escalation

Act as a rigorous bug bounty triager. For triage, validation, or escalation, test the finding yourself where the target is accessible and the testing is authorized. A skill invocation does not grant blanket permission to test a target. Distinguish observed results from inferences and untested possibilities.

Your goals:
1. **Test it yourself** — Independently reproduce the complete exploit and its effect end to end where applicable.
2. **Assess** — Is the finding reproducible, meaningful, and supported well enough to submit?
3. **Escalate** — Pursue the highest real, defensible impact and severity.
4. **Ship** — Output a clean, copy-paste-ready report file. No fluff.

## REPORT AUDIENCE AND INFORMATION DENSITY

Write for a technically capable security triager who understands HTTP, curl or Burp, browser developer tools, redirects, JSON, and common vulnerability concepts. Do not teach standard security tooling or narrate routine actions. Assume the triager has no prior knowledge of the target product, its role model, the affected feature, the reporter's lab, or any custom infrastructure used by the PoC.

- Explain only the product-specific and lab-specific facts needed to reproduce the issue.
- Prefer exact commands, requests, short scripts, paths, and expected outputs over explanatory paragraphs.
- Remove repetition, not operational detail. Reproduction completeness takes priority over brevity.

Read the full skill on GitHub

Details

Skill name: bug-bounty-triage
Repository: Sequester-AG/bug-bounty-triage
License: MIT
Repo updated: 9 October 2026

FAQ

What does the Bug Bounty Triage skill do?

How do I install the Bug Bounty Triage skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add Sequester-AG/bug-bounty-triage --skill bug-bounty-triage. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Bug Bounty Triage popular?

It lives in Sequester-AG/bug-bounty-triage, which has 145 GitHub stars and 22 forks.

Related skills

Stamp Edge

153

xianxie6/stamp-edge-skill

把任意图片处理成邮票风格——直接在原图四周边缘打半圆锯齿孔洞 + 柔和投影,默认无白边、输出真透明背景 PNG(锯齿孔洞和四周 alpha=0),可直接叠加到任何背景;可选加白色纸边;还能把多张邮票拼成等宽列瀑布流合集图(stamp sheet)。当用户提到"邮票边"、"邮票风格"、"邮票质感"、"锯齿边"、"打孔边"、"perforated edge"、"stamp style"、"postage stamp"、"邮票合集"、"邮票排版"、"stamp sheet",或要求把截图/帖子/图片做成邮票效果时使用。

Other10

Odai

119

orziz/odai

以“成事而不妄为”为准则处理通用任务。用户点名 odai，或任务模糊、复杂、高风险、前提可疑、易漏项时使用；简单任务直做。

OtherIn 1 list18

Walk Kcal

206

adexbn/walk-kcal

走得越远，这一顿的卡路里额度越高 —— 用步行距离换额度的吃饭决策。当用户说「现在吃什么」「走过去能多吃多少」「这顿还能吃多少卡」「附近有什么低热量/快餐/西餐/小吃」「换一批」「还有别的吗」时使用。① 按步行距离折算额度；② 麦当劳官方营养值 + 周边餐厅统一推荐，每道菜标「吃得下 / 超了」；③ 按业态与半径细化；④ 出竖屏长图 + 可点的下一步选项。

Other

Like Perspective

139

jangviktor-web/likeskill

李可老中医（1930-2013）思维操作系统。基于13个来源（11本著作+2篇访谈）蒸馏，含423个医案、120+首方剂、92种症状路由、24种假证识别。核心能力：急危重症救治（心衰/中风/休克）、经方剂量体系、六经辨证、假证识别。触发词：「李可」「用李可的视角」「李可会怎么看」「心衰怎么急救」「附子用量」「经方剂量」「假阳证」「破格救心汤」「六经辨证」。注意：大剂量用药需在有经验的中医师指导下使用，本skill仅供学习参考。

Other48

Roadtrip Navigator

116

Waybox-AI/roadtrip-skill

Generate North American road-trip itineraries as a map-first, offline-friendly single-file HTML page. Plans around daily driving segments, overnight stops, fuel/EV-charging, national-park reservations (Recreation.gov / NPS), seasonal road closures, and timezone/border crossings — for executable, decision-ready trips. Two entry modes: give a start + region/destination + days and it plans the whole route, or hand it an existing route and it verifies, fills gaps, and produces the page.

Other11

Agora

170

geekjourneyx/agora

Agora — Intelligent router for the full deliberation ecosystem. Analyzes your question, routes to the right Room, or lists all available rooms. 6 rooms, 31 thinkers, one entry point.

Other27

Browse the most popular Claude skills, all other skills, or write your own with the skills generator.