An automated security research toolkit for discovering vulnerabilities, generating professional disclosure reports, and managing bug bounty earnings.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install bug-bounty
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install bug-bounty using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Bug Bounty Hunter?
The Bug Bounty Hunter skill is a powerful automation module designed for security researchers and white-hat hackers who want to scale their efforts using Openclaw Skills. This tool streamlines the entire bounty lifecycle by performing deep scans for common web vulnerabilities such as SQL injection, XSS, and sensitive data exposure. By integrating this skill into your workflow, you can move from reconnaissance to report submission faster than ever before.
Beyond just scanning, the skill acts as a specialized assistant for the documentation phase of bug hunting. It synthesizes technical findings into professional, platform-ready reports that include clear reproduction steps and remediation advice. Whether you are a beginner looking for recommended programs or a veteran tracker, this skill for Openclaw Skills provides the technical edge needed in modern security research.
Bug Bounty Hunter Use Cases
- Automatically scan target domains for common vulnerabilities including SQLi, XSS, and CSRF.
- Generate professional-grade bug bounty reports with standardized reproduction steps for platforms like HackerOne.
- Track your bug bounty rewards, submission statuses, and total earnings within a unified dashboard.
- Identify and recommend bug bounty programs that match your current expertise level.
How Bug Bounty Hunter Works
- Initialize the process by providing a target domain or URL for the automated scanner to analyze.
- Execute the scanning engine to detect vulnerabilities like SQL injection, cross-site scripting, and sensitive information leaks.
- Review the identified vulnerabilities and verify their impact using the built-in diagnostic tools.
- Trigger the report generation module to create a detailed disclosure document including PoC and fix suggestions.
- Log the submission in the tracking database to monitor progress from triage to reward payment.
Bug Bounty Hunter Setup
To deploy the Bug Bounty Hunter within your environment, ensure you have the Openclaw Skills framework installed. Run the following command in your terminal:
openclaw install bug-bounty-hunter
Once installed, configure your preferred reporting language and reward tracking currency in the configuration file located in your skill directory.
Bug Bounty Hunter Data Schema & Taxonomy
The Bug Bounty Hunter skill maintains a structured data hierarchy to manage security findings and financial records:
| Category | Description |
|---|---|
| Vulnerability Logs | JSON-formatted records of all detected security flaws and payloads used. |
| Disclosure Reports | Markdown files ready for submission, organized by target and date. |
| Reward Database | A tracking table containing submission ID, status (triaged/resolved), and payout. |
| Project Scope | A manifest of authorized targets and restricted endpoints to ensure legal compliance. |
Bug Bounty Hunter Advanced Features
- Advanced multi-payload scanning for complex reflected and stored XSS detection.
- Automated generation of proof-of-concept (PoC) scripts to validate findings quickly.
- Integration with Openclaw Skills reward tracking for long-term financial analysis and reporting.
- Customizable report templates tailored for different bug bounty platforms and private programs.
SKILL.md
Loading
Related Openclaw Skills
OpenX Agent Protocol
OpenX is a sophisticated social protocol for AI agents to co-create identities, goals, and content within a silicon civilization social network.
Feishu Bot Manager
A comprehensive management tool for configuring multiple Feishu bot accounts and binding them to specific agents or groups within OpenClaw.
Fed Agent Skill
An AI-powered economic analyst skill for tracking Federal Reserve policy, interest rates, and inflation data.
Google Drive
A managed OAuth integration allowing AI agents to search, create, and manage files and folders within Google Drive.
Clash for Windows Controller
An automation skill for managing Clash for Windows proxy settings and node switching via natural language commands.
wake-meup-ai
A conversational AI skill for Openclaw Skills that schedules personalized wake-up phone calls using Solana USDC for automated payments.
Featured*
