Pp Yeswehack

<!-- GENERATED FILE — DO NOT EDIT.
     This file is a verbatim mirror of library/developer-tools/yeswehack/SKILL.md,
     regenerated post-merge by tools/generate-skills/. Hand-edits here are
     silently overwritten on the next regen. Edit the library/ source instead.
     See the repository agent guide, section "Generated artifacts: registry.json, cli-skills/". -->

YesWeHack — Printing Press CLI

Prerequisites: Install the CLI

This skill drives the yeswehack-pp-cli binary. You must verify the CLI is installed before invoking any command from this skill. If it is missing, install it first:

1. Install via the Printing Press installer:

   npx -y @mvanhorn/printing-press-library install yeswehack --cli-only

2. Verify: yeswehack-pp-cli --version
3. Ensure $GOPATH/bin (or $HOME/go/bin) is on $PATH.

If the npx install fails (no Node, offline, etc.), fall back to a direct Go install (requires Go 1.26.6 or newer):

go install github.com/mvanhorn/printing-press-library/library/developer-tools/yeswehack/cmd/yeswehack-pp-cli@latest

If --version reports "command not found" after install, the install step did not put the binary on $PATH. Do not proceed with skill commands until verification succeeds.

yeswehack-pp-cli is the researcher-side cockpit for the YesWeHack bug bounty platform. It syncs every program you can see, every scope, every hacktivity disclosure into a local SQLite store so an agent can answer 'what should I work on', 'has this been reported', and 'what is in scope here' in milliseconds, offline. Submit and draft commands are guard-railed by design - the goal is better reports, not more reports.

When to Use This CLI

Reach for this CLI when a security researcher (or their agent) is qualifying YesWeHack programs, drafting a report, or trying to calibrate severity from prior disclosures. Particularly strong for agent-driven triage workflows where the agent needs structured local state to answer 'has this been reported', 'what is in scope', and 'which program pays the most for this asset'. Skip it for program-manager workflows (use ywh2bugtracker) and for one-off curl calls to the public API.

When Not to Use This CLI

Do not activate this CLI for requests that require creating, updating, deleting, publishing, commenting, upvoting, inviting, ordering, sending messages, booking, purchasing, or changing remote state. This printed CLI exposes read-only commands for inspection, export, sync, and analysis.

Unique Capabilities

These capabilities aren't available in any other tool for this API.

Local state that compounds

• programs list --all --results-per-page 100 — Fetch every public and private program visible to the authenticated researcher, using YesWeHack's browser-facing page-size parameter.

  Use this before local triage or backfill. It establishes the visible program set that later scope, hacktivity, and membership commands enrich.

  yeswehack-pp-cli programs list --all --results-per-page 100 --json

• programs scope-drift — See what changed in any program's scope this week — assets added, removed, or modified, with first-seen dates.

  When an agent triages where to spend the hunter's week, drift is the highest-signal source of fresh attack surface. Pick this over a generic program list when the user has already chosen programs and wants to know what changed.

  yeswehack-pp-cli programs scope-drift --since-days 7 --json

• programs list-scopes <slug> — Read one program's in-scope and out-of-scope assets and cache them locally as program-scopes.

  Use this when the user asks for a project plan from the policy/scope data. The cache records program_slug so later local lookup and overlap analysis can stay program-aware.

  yeswehack-pp-cli programs list-scopes swiss-post-evoting --json

• scopes overlap — Surface assets (host or wildcard) that appear in two or more of your invited programs, ranked by best payout.

  When the agent finds a candidate finding on an asset, this answers 'which program pays the most for this asset' before drafting the report.

  yeswehack-pp-cli scopes overlap --min-programs 2 --json

• triage weekend — Ranked plan for a short hunting session - newly added scope, reports needing your response, and trending CWEs in your specialty.

  Picks the right starting move when the hunter (or their agent) has limited time and needs a confidence-weighted plan, not a feed.

  yeswehack-pp-cli triage weekend --hours 6 --json

• programs fit — Rank invited and public programs by how well your historical CWE specialties match each program's hacktivity payout pattern.

  Answers 'which program am I most likely to land on this week' before time is spent on scope reading or report drafting.

  yeswehack-pp-cli programs fit --specialty xss,ssrf,idor --json

• events calendar — Chronological view of platform events, payout deadlines, and CTFs gating private invites - filtered to programs you are invited to.

  Surfaces time-bound opportunities (renewal bumps, CTF gates) the hunter would otherwise miss until after the fact.

  yeswehack-pp-cli events calendar --mine --json

Anti-spam guard-rails

• report dedupe — FTS5 search over the public hacktivity feed plus your own reports for title, asset, or CWE overlap — exits 2 if a high-confidence collision exists.

  Aligns with the YesWeHack Platform Code of Conduct's anti-spam rule. Before an agent drafts a report, this answers 'has someone already filed this' deterministically.

  yeswehack-pp-cli report dedupe --title 'SQLi in /api/users/{id}' --asset api.example.com --cwe CWE-89 --json

• report cvss-check — Parse a CVSS 3.1 vector, recompute its base score, and flag impossible combinations against report steps text - rule-based, no LLM.

  Catches CVSS misrepresentations before the report is filed - the kind of mistake that loses credibility with triagers.

  yeswehack-pp-cli report cvss-check 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H' --steps draft.md --json

• report draft — Create a markdown draft pre-filled with the program's reward grid, accepted severity levels, and an allowed asset picker from local scopes - no network call.

  Gives an agent a deterministic shape for a report instead of letting it fabricate the structure. Quality multiplier per the Platform CoC.

  yeswehack-pp-cli report draft yes-we-hack --output ./my-draft.md

• report submit — Submit a drafted report after dry-run preview, in-scope validation, and automatic pre-submit dedupe. Requires --confirm.

  Lets an agent close the loop on submission without violating the platform's anti-AI-slop policy. No batch flag, no template-flood.

  yeswehack-pp-cli report submit ./my-draft.md --confirm

Agent-native plumbing

• programs hacktivity <slug> — Read the YesWeHack web app's project-specific hacktivity endpoint for one program.

  Use this instead of assuming hacktivity list --programs <slug> filters the global feed. It is the reliable project activity source when a program exposes hacktivity.

  yeswehack-pp-cli programs hacktivity digital-flanders-vulnerability-disclosure-program --json

• hacktivity trends — Histogram of disclosed report categories and average bounty for one program over a time window.

  Calibrates severity expectations and report-style for a target program before the agent starts hunting it.

  yeswehack-pp-cli hacktivity trends gojek --since-days 90 --json

• hacktivity learn — Filtered slice of disclosed reports for a program and CWE - top N by bounty, with severity and writeup links, in pipe-friendly JSON.

  Lets the agent calibrate from prior art before the hunter writes a single line - turning hacktivity into a learning surface, not just a feed.

  yeswehack-pp-cli hacktivity learn --program gojek --cwe CWE-89 --since-days 90 --json | claude 'summarize what worked'

HTTP Transport

This CLI uses Chrome-compatible HTTP transport for browser-facing endpoints. It does not require a resident browser process for normal API calls.

Command Reference

business_units — Customer organizations that run programs

• yeswehack-pp-cli business_units — List business units visible to the user

events — Platform events (CTFs, dojos, live sessions)

• yeswehack-pp-cli events — List YesWeHack events

hacktivity — Public disclosed reports feed (the platform's learning surface)

• yeswehack-pp-cli hacktivity by_hunter — List a hunter's disclosed reports
• yeswehack-pp-cli hacktivity list — List recently disclosed reports across all public programs

hunters — Researcher profiles (other hunters on the platform)

• yeswehack-pp-cli hunters get — Get a hunter's public profile (points, rank, impact, achievements)
• yeswehack-pp-cli hunters list_achievements — List a hunter's earned achievement badges

programs — Bug bounty programs (public and private the user is invited to)

• yeswehack-pp-cli programs get — Get a program's full detail (rules, reward grid, scope counts, BU, etc.)
• yeswehack-pp-cli programs list — List bug bounty programs the user can see
• yeswehack-pp-cli programs list-scopes — List the in-scope and out-of-scope assets for a program
• yeswehack-pp-cli programs hacktivity — List disclosed activity for one program

ranking — Global researcher leaderboard

• yeswehack-pp-cli ranking — Top hunters by points

taxonomies — Reference data used by the platform (vulnerability parts, countries, profile URL types)

• yeswehack-pp-cli taxonomies list_countries — Country reference list (codes, names)
• yeswehack-pp-cli taxonomies list_profile_url_types — Allowed profile URL types (twitter, github, linkedin, etc.)
• yeswehack-pp-cli taxonomies list_vulnerable_parts — List vulnerability parts (CWE-like taxonomy used when filing reports)

user — Authenticated user account, reports, invitations, email aliases

• yeswehack-pp-cli user get_self — Get the authenticated user
• yeswehack-pp-cli user list_email_aliases — List the authenticated user's email aliases (per-program forwarding addresses)
• yeswehack-pp-cli user list-invitations — List pending program invitations
• yeswehack-pp-cli user list-members — List the authenticated hunter's program membership records
• yeswehack-pp-cli user list-access-programs — List programs the authenticated hunter can currently access
• yeswehack-pp-cli user list-revoked-members — List revoked program membership records
• yeswehack-pp-cli user list-reports — List reports the authenticated user has submitted