Agent skill · security · aradotso
pentest-agents-bug-bounty-framework
Autonomous bug bounty agent framework with 50 agents, hunt loops, exploit chains, MCP servers for platform integration and writeup search
Why this skill is useful
Adds 50 autonomous bug bounty agents and 2,500 lines of concrete payloads that enhance security testing capabilities.
What it needs
Requires git, python3 installed locally. Requires bugcrowd, hackerone, intigriti, yeswehack account access. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Pentest Agents Bug Bounty Framework Skill by ara.so — Security Skills collection. Autonomous bug-bounty framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw. Ships 50 agents, 26 commands, 19 CLI tools, 11 skills, and 2 MCP servers (bounty platforms + writeup search). Includes 2,500 lines of concrete payloads, 7-Question Gate validation, autonomous hunt loops, A→B exploit chain building, persistent brain with endpoint tracking, and cross-IDE installer. Installation For Claude Code (Native) For Other AI Coding Tools Installer Commands MCP Servers Bounty Platforms Server (16 Platforms) HackerOne (full API), Bugcrowd, Intigriti, Immunefi, YesWeHack + 11 stubs. Configuration: 7 MCP Tools: listplatforms - List all configured platforms getprogramscope - Fetch in/out-of-scope assets getprogrampolicy - Get submission rules searchhacktivity - Find similar reports syncprogram - Download scope to local brain draftreport - Prepare submission submitreport - Submit to platform Writeup Search Server (BYO Index) Three search modes (auto-detected, graceful fallback): Mode Requires Searches ------ ---------- ---------- FAISS (semantic) faiss-cpu, sentence-transformers, your metadata.db + index.faiss Your writeup corpus via vector embeddings SQLite (keyword) Your metadata.db only Your writeup corpus via LIKE over text Local (default) Nothing rules/payloads.md + shipped skills Configuration: Build Your Own Index: Edit rag-builder/repos.yaml to customize the 146-entry seed list of CTF archives, bug-bounty reports, and payload collections. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/pentest-agents-bug-bounty-framework