public-skills-builder: Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups

by awarexone · Claude Skill · ★ 238

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install public-skills-builder

git clone https://github.com/Awarexone/public-skills-builder

Taken from the project's README on GitHub.

Security audit verdict: SAFE · quality 71/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

ai-securitybug-bountyclaude-aiclaude-codeethical-hackinghackeronepenetration-testingpythonsecurity-toolsvulnerability-scanner

Quick Facts

Stars238
Forks50
LanguagePython
CategoryClaude Skill
Quality Score71/100
Last Updated2026-09-21
Created2026-03-10
Platformsclaude-code, python
Est. Tokens~2k

About public-skills-builder

Public Skills Builder Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups - no private reports needed. Feed it 500+ public bug bounty reports. Get back 18 ready-to-use Claude Code skill files - one per vulnerability class - packed with real-world techniques, payloads, and bypass patterns.

Compatible Skills

These tools work well together with public-skills-builder for enhanced workflows:

  • pentest-ai — semantic(0.49)+complementary+shared_fw(anthropic)+rare_topics+same_lang+similar_pop+shared_platform (79%)
  • h1-brain — semantic(0.55)+complementary+rare_topics+same_lang+similar_pop+shared_platform (74%)
  • bug-reaper — semantic(0.38)+complementary+shared_fw(anthropic)+same_lang+similar_pop+shared_platform (71%)

public-skills-builder alternative? Top 6 similar tools

Looking for a public-skills-builder alternative? If you're comparing public-skills-builder with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • numasec by FrancescoStabile · ⭐ 811

    The AI Agent for Cyber Security.

  • h5i by h5i-dev · ⭐ 792

    Unified Rust framework for building, verifying, and testing web apps. Kernel-based architecture for Lean 4 ver

  • cybersec-toolkit by 26zl · ⭐ 87

    One command installs 670+ security tools on Debian/Ubuntu/Kali, Fedora, Arch, openSUSE and Termux. Its authori

  • medusa by Pantheon-Security · ⭐ 1.0k

    AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions

  • pentest-agents by H-mmer · ⭐ 1.0k

    Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents

  • god-eye by Vyntral · ⭐ 511

    AI-powered subdomain enumeration tool with local LLM analysis via Ollama - 100% private, zero API costs

More Claude Skill Tools

Explore other popular claude skill tools:

View all Claude Skill tools →

Popular Python Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Claude Skill tools