Repository
awarexone/Agentic-Bug-Hunter agent skills
- skills
- 10
- GitHub stars
- 5.3k
GitHub description: “AI-powered bug bounty hunting toolkit that works with or without subscription.”
- Stars
- 5,282 (933 forks)
- Licence
- MIT
- Last push
- Oct 2026
- Created
- Mar 2026
- Homepage
- awarexone.com
- ai-security
- bug-bounty
- bugcrowd
- claude-ai
- ethical-hacking
- hackerone
- penetration-testing
- recon
- vulnerability-scanner
- claude-code
- cti
- hacking
- hacking-tool
Install all skills
npx skills add awarexone/Agentic-Bug-HunterAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in awarexone/Agentic-Bug-Hunter, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Guides smart contract audits and bounty target selection with ten DeFi bug classes, kill signals, a Foundry PoC template and grep patterns. | awarexone/ | 5.3k | 3 repos | ~4.5k | Automated safety check: Pass | MIT | 2 days ago |
| 2 | Orchestrates a bug bounty session with a 5-phase workflow and a critical-thinking framework covering developer psychology, anomaly detection and What-If experiments. | awarexone/ | 5.3k | 2 repos | ~4.7k | Automated safety check: Pass | MIT | 2 days ago |
| 3 | Recovers a client-side request signature or anti-bot token just far enough to replay blocked requests in bug bounty testing, starting from a captured packet. | awarexone/ | 5.3k | — | ~4.7k | Automated safety check: Pass | MIT | 2 days ago |
| 4 | Screens EVM and Solana meme coins for rug pull signs such as hidden mint, honeypot logic and fee tricks, starting with fast kill signals before any code review. | awarexone/ | 5.3k | 1 repo | ~2.4k | Automated safety check: Pass | MIT | 2 days ago |
| 5 | Screens a vulnerability finding with a seven-question gate and pre-submission checks before any report is written, so weak or out-of-scope findings are dropped early. | awarexone/ | 5.3k | 3 repos | ~3.4k | Automated safety check: Pass | MIT | 2 days ago |
| 6 | Guides writing bug bounty reports for HackerOne, Bugcrowd, Intigriti and Immunefi: impact-first titles, proven claims, CVSS 3.1 scoring and a pre-submit checklist. | awarexone/ | 5.3k | 2 repos | ~3.9k | Automated safety check: Pass | MIT | 2 days ago |
| 7 | Web2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau), directory fuzzing (ffuf), JS analysis… | awarexone/ | 5.3k | 2 repos | ~6.4k | Automated safety check: Warn | MIT | 2 days ago |
| 8 | Audits MCP servers and their client configs for tool poisoning, prompt injection, over-privileged tools, injection bugs, secret leaks and missing approval gates. | awarexone/ | 5.3k | — | ~1.9k | Automated safety check: Warn | MIT | 2 days ago |
| 9 | Black-box security audit of a DEPLOYED AI agent (not the MCP server behind it) — tool-call hijacking, cross-session memory poisoning, confused-deputy via connected tools, agent-to-agent IDOR… | awarexone/ | 5.3k | — | ~1.1k | Automated safety check: Pass | MIT | 2 days ago |
| 10 | 10.Bug Bounty Complete bug bounty workflow — recon, pre-hunt learning, vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, GraphQL, HTTP smuggling… | awarexone/ | 5.3k | — | ~20k | Automated safety check: Warn | MIT | 2 days ago |
Questions, answered from the data.
What is the best skill in awarexone/Agentic-Bug-Hunter?
Web3 Smart Contract Audit from awarexone/Agentic-Bug-Hunter ranks first of the 10 skills in awarexone/Agentic-Bug-Hunter listed here, with the highest score: its repository has 5.3k GitHub stars, 3 other GitHub owners carry a copy, its SKILL.md loads about 4.5k tokens and it passes the automated safety check with no findings. Next come Bug Bounty Hunting Methodology and Client Request Signature Reversal.
Are the skills in awarexone/Agentic-Bug-Hunter official?
None yet. All 10 skills in awarexone/Agentic-Bug-Hunter listed here come from community repositories; a skill counts as official when the product's own GitHub organization publishes it.
How do I install all skills from awarexone/Agentic-Bug-Hunter?
Run npx skills add awarexone/Agentic-Bug-Hunter in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.