BugReaper is a senior offensive security agent designed to identify real, exploitable vulnerabilities and generate professional reports for bug bounty platforms.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install bug-reaper
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install bug-reaper using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is BugReaper?
BugReaper is a sophisticated offensive security researcher skill built for the Openclaw Skills ecosystem. It functions as a senior bug bounty hunter that focuses exclusively on evidence-based vulnerability discovery, ensuring that every identified bug is exploitable and passes professional triage. By following a rigorous four-phase workflow, it helps developers and security researchers audit web applications, APIs, and local source code repositories for high-impact security flaws.
This skill is engineered to eliminate false positives and avoid low-impact findings. It bridges the gap between automated scanning and manual expert analysis by providing detailed methodologies for 18 different vulnerability classes. Whether you are hunting on HackerOne or performing a white-box audit of a GitHub repo, this agent provides the technical depth and structured reporting needed for successful security engagements within Openclaw Skills.
BugReaper Use Cases
- Hunting for high-severity vulnerabilities like IDOR, SSRF, and RCE in Web2 applications.
- Conducting white-box security audits on locally downloaded source code repositories.
- Automating the reconnaissance and technology fingerprinting phase of a penetration test.
- Generating professional, platform-specific vulnerability reports for HackerOne, Bugcrowd, and Intigriti.
- Validating potential security findings by tracing attacker-controlled input to dangerous sinks.
How BugReaper Works
- Reconnaissance: The agent maps the attack surface, identifies the tech stack, and verifies the program scope to ensure authorization.
- Audit: It systematically hunts for vulnerabilities one class at a time, prioritizing high-ROI bugs like access control and auth bypass.
- Validation: Potential findings are rigorously tested by tracing the input path and identifying defense bypasses to confirm exploitability.
- Reporting: The agent generates a structured, professional report tailored to the specific requirements of the target bug bounty platform.
BugReaper Setup
To begin using this agent within Openclaw Skills, ensure you have the necessary authorization for your target. You can initialize the analysis by running the scope analysis script:
python scripts/analyze_scope.py --file scope.txt
Once the scope is defined, point the agent to a target URL or a local directory for source code review. The agent will then suggest specific payloads or requests for you to execute in your environment.
BugReaper Data Schema & Taxonomy
The skill organizes its security intelligence and findings using a structured file hierarchy:
| Component | Description |
|---|---|
findings.json |
A central data store for all confirmed and theoretical vulnerabilities discovered during the audit. |
references/vulnerabilities/ |
A library of 18+ Markdown files detailing methodologies for specific attack vectors like SQLi, XSS, and IDOR. |
references/platforms/ |
Platform-specific templates for generating reports that meet the standards of HackerOne, Bugcrowd, and others. |
scripts/ |
Python utilities for parsing program scopes and automating the generation of final reports from JSON data. |
BugReaper Advanced Features
- Specialized Source Code Audit mode for deep white-box analysis of local repositories.
- Vulnerability Chaining logic to escalate multiple low-impact bugs into a single high-impact Critical finding.
- WAF Bypass methodology providing specific payload suggestions for targets protected by web application firewalls.
- Real-time triage simulation to filter out false positives before they are reported.
- Automated report generation that maps findings to platform-specific severity tiers and CVSS scores.
SKILL.md
Loading
Related Openclaw Skills
Agent Telegram Communication
A standardized communication protocol for AI agent teams to send structured status updates and notifications via Telegram.
Async Web Search
A high-performance parallel web search tool using Python's asyncio to retrieve data across multiple queries simultaneously.
Codex Orchestrator
A methodical end-to-end software delivery orchestrator for Codex CLI that manages project lifecycles through strict quality gates and spec-driven development.
ClawCost
A financial tracking utility for AI agents that monitors token costs, budget limits, and model-specific expenditures.
Lance: Web3 Vulnerability Hunter
Lance is a specialized Web3 security agent designed for high-signal vulnerability discovery and reporting in smart contracts and DeFi protocols.
Bilibili UP to KB
A powerful tool to convert Bilibili videos and entire creator channels into organized, searchable text-based knowledge bases using local transcription.