Program Selection
Scores HackerOne/Bugcrowd/Intigriti programs on 7 weighted criteria before you commit hunting time.
Test report
- Verdict
- Works with setup
- Score
- Tested
- Jul 15, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · 0f45223
Solid scoring rubric, but the body tells you to open `templates/program-score-card.md` and that file does not exist anywhere in the repo (only bugcrowd/hackerone/intigriti/immunefi templates do) — you have to reconstruct the score table by hand from the SKILL.md itself.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 3/5
- Triggers reliably 5/5
- Output vs. baseline 8/10
- Docs & honesty 3/5
What Program Selection does
Gives a repeatable 7-criteria, 35-point rubric (payout history, response time, scope size/quality, competition, tech-stack match, program hygiene) to decide whether a bug bounty program is worth hunting. Triggers on phrasing like "should I hunt this program" or "is this H1 worth it", and explicitly should not fire once a target is already committed and the user is doing recon.
How to install Program Selection
git clone https://github.com/0xGhostCAT/claude-ai-cyber-security-skills
cd claude-ai-cyber-security-skills
mkdir -p ~/.claude/skills
cp -r skills/01-program-selection ~/.claude/skills/program-selection
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Program Selection
-
/program-selectionScores HackerOne/Bugcrowd/Intigriti programs on 7 weighted criteria before you commit hunting time.
It also activates on plain-language prompts like these:
-
Should I spend time hunting this HackerOne program or skip it? -
Score this Bugcrowd program to see if it's worth pursuing -
Help me decide whether this Intigriti target is worth my time
Frequently asked questions
- Is the Program Selection skill free?
- Yes. The skill itself is free from 0xGhostCAT/claude-ai-cyber-security-skills. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Program Selection work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 15, 2026. Verdict: Works with setup. Solid scoring rubric, but the body tells you to open `templates/program-score-card.md` and that file does not exist anywhere in the repo (only bugcrowd/hackerone/intigriti/immunefi templates do) — you have to reconstruct the score table by hand from the SKILL.md itself.
- What is the Program Selection SkillProof Score?
- 7.6/10 — installs cleanly 3/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 3/5.
- How do I install Program Selection?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Program Selection with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.