🐞
WritingPython

Bugcrowd Reporting

by elementalsouls

Bugcrowd Reporting is a Writing skill for Claude Code, published by elementalsouls in Claude-BugHunter.

3.6K stars559 forkson elementalsouls/Claude-BugHunterAdded 2026/08/16+3% in starsRepository updated 2026/08/16
ai-securityanthropicapplication-securitybug-bountybugbountybugcrowdclaudeclaude-codeclaude-skillsethical-hackinghackeroneoffensive-securitypentestingred-teamsecurity-toolsweb-security
Install in seconds
Install Bugcrowd Reporting
Copy Bugcrowd Reporting into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/bugcrowd-reporting ~/.claude/skills/bugcrowd-reporting

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/elementalsouls/Claude-BugHunter.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
skills/bugcrowd-reporting/SKILL.md in elementalsouls/Claude-BugHunter
Installs to
~/.claude/skills/bugcrowd-reporting
Collection
One of 25 skills cataloged from this repository
Category
Writing1012 skills

What Bugcrowd Reporting does

Bugcrowd Reporting provides Bugcrowd-specific submission tactics for VRT category selection, manual severity overrides, OOS-clause rebuttals, and chained-finding cross-references. Use it when filing Bugcrowd reports or responding to triage decisions.

Bugcrowd Reporting is cataloged under Writing on DirSkills. Bugcrowd Reporting comes from a repository tagged ai-security, anthropic, application-security, bug-bounty and bugbounty.

Documentation

README

BUGCROWD REPORTING — Program-Specific Tactics

Companion to the generic report-writing skill. Use when working specifically on Bugcrowd submissions where VRT mapping, OOS-clause rebuttals, or per-program target selection matter.

This skill encodes patterns that apply specifically to Bugcrowd's submission flow. For the generic per-platform templates (HackerOne / Bugcrowd / Intigriti / Immunefi report bodies), use the report-writing skill. For the 7-Question Gate before deciding to report at all, use triage-validation.


1. VRT Category Selection — Search & Fallback Strategy

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Bugcrowd Reporting

  • What else does elementalsouls publish alongside Bugcrowd Reporting?

    Bugcrowd Reporting is one of 25 skills that DirSkills catalogs from elementalsouls/Claude-BugHunter, the repository it ships in. Its siblings there include API Misconfig Hunter, APK Red Team Pipeline and Auth Bypass Hunting. Each one is a separate skill with its own page in this directory, installs the same way Bugcrowd Reporting does, and is maintained by elementalsouls in that same repository. The rest of the collection is listed on the elementalsouls/Claude-BugHunter page.

  • How does Bugcrowd Reporting compare to other Writing skills?

    Bugcrowd Reporting ranks #172 by stars among the 1012 Writing skills in this catalog. The most-starred ones next to it are Article Writing, Social Media Content Calendar and Knowledge Comic Creator. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Bugcrowd Reporting against them. Open each page to compare what they document and how they install.

More from elementalsouls/Claude-BugHunter

Bugcrowd Reporting is one of 25 skills cataloged on DirSkills from elementalsouls/Claude-BugHunter.

See all 25 skills
🐞
2w ago

API Misconfig Hunter

API Misconfig Hunter finds mass assignment, prototype pollution, HTTP verb tampering, and server-side parameter pollution in APIs. Use it when auditing API endpoints for security misconfigurations in bug bounty or penetration testing.
Quality
3.6K559
📱
2w ago

APK Red Team Pipeline

APK Red Team Pipeline automates Android APK reconnaissance, acquisition, decompilation, secret scanning, and Frida instrumentation for authorized red-team assessments. Use when a target has a mobile app catalogue, hosts APK files, or when 'mobile app' is in scope.
Automation
3.6K559
🔓
2w ago

Auth Bypass Hunting

Auth Bypass Hunting guides reconnaissance of authentication entry points and exploitation of SSO, SAML, JWT, XMLRPC, and legacy protocol weaknesses to find login bypasses and privilege escalation. Use when assessing web apps, WordPress, SharePoint, Atlassian, and partner portals for auth flaws.
Quality
3.6K559
🔍
2w ago

Bug Bounty

Bug Bounty guides security researchers through the full bug bounty workflow: reconnaissance, hunting vulnerabilities (IDOR, SSRF, XSS, auth bypass, AI/LLM security issues), validating findings, and writing impactful reports.
Quality
3.6K559
🕵️
2w ago

Bug Bounty Local Toolkit

Bug Bounty Local Toolkit provides the complete bug-bounty workflow (recon, learning, hunting, validation, reporting) and resolves local install paths for tools, wordlists, and clones. Use it when hunting from a local machine and you need to know where jhaddix, SecLists, trufflehog, ffuf, dalfox, or ghauri are installed, or as the full-workflow variant of the local toolkit.
AI Engineering
3.6K559
🐞
2w ago

Bug Bounty Methodology

Bug Bounty Methodology orchestrates bug bounty hunting sessions by combining a five-phase non-linear workflow with critical thinking tactics like developer psychology, anomaly detection, and what-if experiments to decide next steps.
Quality
3.6K559