bugbounty

Use when performing black-box web or API security testing through Burp Suite MCP. Maps attack surface from live traffic, validates exploitability across OWASP Top 10 (plus LLM, Zero Trust, and reliability risks when present), and produces evidence-first reports without patch code. Initializes .github/memory.md when missing.

Use when reviewing a repository for exploitability-first security risks across OWASP Top 10, OWASP LLM Top 10, Zero Trust, and reliability-with-security impact. Initializes .github/memory.md when missing. Do not use for direct patch generation.

This is a SKILL.md template to identify side skills, workflows and methodologies that can be extracted from conversations guided by the main skill.