Bug Bounty Methodology
Orchestrates the five-phase bug bounty hunting workflow and routes to other skills.
Test report
- Verdict
- Works with setup
- Score
- Tested
- Jul 13, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · 004df9f
An authorized bug-bounty methodology and knowledge guide: a master orchestrator for a 5-phase hunting workflow (engagement-type classification, Define/Select/Execute session framing, Wide/Deep routing, recon sequencing, and false-positive discipline rules), tested here against a hypothetical inline HackerOne VDP scope with no live targets. Installs cleanly as a single self-contained SKILL.md with strict-YAML frontmatter and no external dependencies, and its tightly-scoped trigger fires only on session-start/what-should-I-do-next phrasing. In the A/B test both the skill and a no-skill baseline produced correct, well-structured Day-1 plans reaching the same conclusions (bug-bounty discipline, Wide recon route, IDOR/auth focus); the skill's output mapped directly onto its documented tables but was not materially more rigorous than strong general pentest knowledge.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 5/5
- Triggers reliably 5/5
- Output vs. baseline 5/10
- Docs & honesty 4/5
What Bug Bounty Methodology does
Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Routes to all other skills based on current hunting phase. Also use when asking "what should I do…
How to install Bug Bounty Methodology
git clone https://github.com/elementalsouls/Claude-BugHunter
cd Claude-BugHunter
mkdir -p ~/.claude/skills
cp -r skills/bb-methodology ~/.claude/skills/bb-methodology
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Bug Bounty Methodology
-
/bb-methodologyOrchestrates the five-phase bug bounty hunting workflow and routes to other skills.
It also activates on plain-language prompts like these:
-
What should I do next on this bug bounty target -
Start a new bug bounty hunting session on this target -
Guide me through the next phase of this hunt
Frequently asked questions
- Is the Bug Bounty Methodology skill free?
- Yes. The skill itself is free from elementalsouls/Claude-BugHunter. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Bug Bounty Methodology work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 13, 2026. Verdict: Works with setup. An authorized bug-bounty methodology and knowledge guide: a master orchestrator for a 5-phase hunting workflow (engagement-type classification, Define/Select/Execute session framing, Wide/Deep routing, recon sequencing, and false-positive discipline rules), tested here against a hypothetical inline HackerOne VDP scope with no live targets. Installs cleanly as a single self-contained SKILL.md with strict-YAML frontmatter and no external dependencies, and its tightly-scoped trigger fires only on session-start/what-should-I-do-next phrasing. In the A/B test both the skill and a no-skill baseline produced correct, well-structured Day-1 plans reaching the same conclusions (bug-bounty discipline, Wide recon route, IDOR/auth focus); the skill's output mapped directly onto its documented tables but was not materially more rigorous than strong general pentest knowledge.
- What is the Bug Bounty Methodology SkillProof Score?
- 7.6/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 5/10, docs & honesty 4/5.
- How do I install Bug Bounty Methodology?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Bug Bounty Methodology with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.