bugcrowd-reporting

仓库创建 2026年5月5日最近提交 4 天前SkillHot 收录 20 天前
▸ 精选理由

补充平台特有流程与争议模板,能提高在 Bugcrowd 上的提交命中率与接受率。

这个 Skill 做什么

针对 Bugcrowd 平台的报告写作战术、VRT 分类和举证模板优化。

专门优化在 Bugcrowd 平台提交漏洞报告的写法与策略,包含当 VRT 找不到精确分类时的回退策略、当默认严重度低估影响时的人工降级/升级写法,以及针对 OOS 的反驳模板和交叉引用找法。提交到 Bugcrowd、遇到 triager 关闭或降级、或需要按项目选择测试目标时用得上。它的特别点在于把平台规则融入写作流程,还包含研究者的账户与沟通礼仪建议,提升通过率和专业度。

▸ 展开 SKILL.md 英文原文

Bugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, manual severity override when VRT defaults underrate impact, severity-request paragraph as first body section, OOS-clause rebuttal templates (rate limiting on auth-flow endpoints, debug-info framing, user-enumeration with sensitive PII, theoretical-issue counter), chained-finding cross-reference patterns, target selection for QA-vs-prod programs, researcher-side hygiene (Bugcrowdninja email alias, account state restoration, friendly-tester posture). Use when filing a Bugcrowd submission, when VRT default seems wrong, when triager closes as OOS or downgrades severity, when chaining linked submissions, or when scope distinguishes production from QA. Pairs with report-writing and triage-validation.

垂直行业报告写作BugcrowdVRT映射通用
3.1k
Stars
480
Forks
40
仓库内 Skill
+245
7 日增星
安装 / 使用
给你的 Agent 一句话(通用)
帮我安装这个 skill:https://raw.githubusercontent.com/elementalsouls/Claude-BugHunter/main/skills/bugcrowd-reporting/SKILL.md
或 curl 直取 SKILL.md
curl -fsSL "https://raw.githubusercontent.com/elementalsouls/Claude-BugHunter/main/skills/bugcrowd-reporting/SKILL.md"
SKILL.MD 节选查看完整文件 ↗
# BUGCROWD REPORTING — Program-Specific Tactics

> Companion to the generic `report-writing` skill. Use when working specifically on Bugcrowd submissions where VRT mapping, OOS-clause rebuttals, or per-program target selection matter.

This skill encodes patterns that apply specifically to Bugcrowd's submission flow. For the generic per-platform templates (HackerOne / Bugcrowd / Intigriti / Immunefi report bodies), use the `report-writing` skill. For the 7-Question Gate before deciding to report at all, use `triage-validation`.

---

## 1. VRT Category Selection — Search & Fallback Strategy

Bugcrowd's submission form requires a single VRT (Vulnerability Rating Taxonomy) selection. The dropd
via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有