web-sqli
claudeUse when testing a web application for SQL injection on an authorized engagement.
7 skills
0
claude
bugbounty-report-writing
Use when a validated in-scope finding needs to become a report that gets triaged fast and paid fairly.
/
Plugin bugbounty-report-writing from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.
What it installs
Skills (4)
bugbounty-report-writingUse when a validated in-scope finding needs to become a report that gets triaged fast and paid fairly. Covers the full report standard triagers reward (specific title, justified severity, two-sentence summary, numbered reproduction steps with raw HTTP requests, concrete impact, remediation paragraph
bugbounty-report-writing-cvss-scoringUse when a program asks for CVSS with your report and you need a defensible score for an in-scope finding. Covers the CVSS v3.1 base metrics one by one with web bug examples (attack vector, complexity, privileges, user interaction, scope, confidentiality, integrity, availability), common mis-scoring
bugbounty-report-writing-impact-statementsUse when you have a working proof of concept on an in-scope target and need to write the impact section that justifies your severity. Covers translating technical bugs into concrete attacker gains (whose data, which privilege, what action), the impact ladder from informational to critical with examp
bugbounty-report-writing-proof-of-concept-formatUse when you need to present the proof of concept for an in-scope bug bounty finding in the format triagers can replay. Covers the PoC evidence standard (raw HTTP requests over screenshots, clean-state numbered steps, exact values), per-bug-class PoC patterns (XSS, IDOR, SSRF, SQLi, auth flaws, file
More from mizazhaider-ceh/AgentArsenal
All 353 plugins →nmap-methodology
claudeUse when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.
6 skills
0
privesc-linux
claudeUse when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.
6 skills
0
web-xss
claudeUse when testing a web application for cross-site scripting on an authorized engagement.
6 skills
0
ad-enumeration
claudeUse when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.
5 skills
0
api-security-testing
claudeUse when testing REST, GraphQL, or internal APIs on an authorized engagement.
5 skills
0
Similar plugins
career-ops
claudecodexOpen-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications
5 skills · hooks
career-ops-hq/career-ops 82,253
agentdb
claudeAgentDB (external: maintained in ruvnet/agentdb, pinned to commit 27678c3, plugin 3.6.0): agentdb's own standalone MCP server pinned to [email protected] (vector memory with get/list/update/delete for records, patterns and skills, hybrid keyword + vector episode search and an opt-in local cross-encoder, an opt-in aidefence injection guard on memory writes, reflexion, skills, outcome feedback, capabilities report), a memory-specialist agent, 3 skills, /agentdb-status, and the agentdb mod guard that keeps secrets out of memory and refuses delete/reset unless allowed. Complements ruflo-agentdb, which reaches AgentDB through ruflo's server
3 skills · 1 command · 1 agent · 1 MCP server
ruvnet/ruflo 81,589
humanizer
claudeRewrite AI-sounding text so it reads like the writer without changing what it says.
1 skill
blader/humanizer 68,461
academic-research-skills
claude5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.
5 skills · 16 commands · 4 agents · hooks
Imbad0202/academic-research-skills 56,698
ifixai
claudecodexIndependent auditing for AI agents, open source. Claude discovers your setup, confirms the cost, and audits your agent against the one question other tools skip: is it doing the job it's supposed to do, given your business rules and org structure? Test any model (Anthropic, OpenAI, Gemini, Azure, Bedrock, …) graded by self, one independent judge, or a cross-vendor panel; each provider is billed to its own account via a key in your settings, never the command line. Results render as an interactive artifact (with a static-report fallback).
1 skill · hooks
ifixai-ai/iFixAi 45,158
documentation-generation
claudecodexOpenAPI specification generation, Mermaid diagram creation, tutorial writing, API reference documentation
3 skills · 1 command · 5 agents
wshobson/agents 42,461
Maintain bugbounty-report-writing?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins353 plugins