Program Selection

Scores HackerOne/Bugcrowd/Intigriti programs on 7 weighted criteria before you commit hunting time.

Works with setup

Test report

Verdict
Works with setup
Score
7.6/10
Tested
Jul 15, 2026
Environment
Claude Code 2.x (agent harness)
Upstream re-checked
Aug 10, 2026 · 0f45223

Solid scoring rubric, but the body tells you to open `templates/program-score-card.md` and that file does not exist anywhere in the repo (only bugcrowd/hackerone/intigriti/immunefi templates do) — you have to reconstruct the score table by hand from the SKILL.md itself.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

  • Installs cleanly 3/5
  • Triggers reliably 5/5
  • Output vs. baseline 8/10
  • Docs & honesty 3/5

What Program Selection does

Gives a repeatable 7-criteria, 35-point rubric (payout history, response time, scope size/quality, competition, tech-stack match, program hygiene) to decide whether a bug bounty program is worth hunting. Triggers on phrasing like "should I hunt this program" or "is this H1 worth it", and explicitly should not fire once a target is already committed and the user is doing recon.

How to install Program Selection

git clone https://github.com/0xGhostCAT/claude-ai-cyber-security-skills
cd claude-ai-cyber-security-skills
mkdir -p ~/.claude/skills
cp -r skills/01-program-selection ~/.claude/skills/program-selection

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Program Selection

  • /program-selection Scores HackerOne/Bugcrowd/Intigriti programs on 7 weighted criteria before you commit hunting time.

It also activates on plain-language prompts like these:

  • Should I spend time hunting this HackerOne program or skip it?
  • Score this Bugcrowd program to see if it's worth pursuing
  • Help me decide whether this Intigriti target is worth my time

Frequently asked questions

Is the Program Selection skill free?
Yes. The skill itself is free from 0xGhostCAT/claude-ai-cyber-security-skills. SkillProof publishes the install command and an independent test verdict at no cost.
Does Program Selection work with Claude Code?
We tested it with Claude Code 2.x (agent harness) on Jul 15, 2026. Verdict: Works with setup. Solid scoring rubric, but the body tells you to open `templates/program-score-card.md` and that file does not exist anywhere in the repo (only bugcrowd/hackerone/intigriti/immunefi templates do) — you have to reconstruct the score table by hand from the SKILL.md itself.
What is the Program Selection SkillProof Score?
7.6/10 — installs cleanly 3/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 3/5.
How do I install Program Selection?
Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Program Selection with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.