skills

Standard HackenProof triage closure comment templates for Out of Scope, Informative, Not Applicable, Need More Info, Duplicate, and Dual Defence Informative states. Use whenever writing a closure or decision comment on a HackenProof report. Trigger on "closure comment", "triage comment", "write comment", "close as", or any state transition that requires a comment.

Grade the evidence quality of a HackenProof bug bounty report before forming a severity opinion. Returns one of five verdicts (Verified, Plausible, Weak, Invalid, Out of Scope Evidence) based on a rubric of evidence tiers and negative signals. Trigger on "grade poc", "evidence quality", "is this poc valid", "check evidence", or before any triage severity decision.

Accumulated HackenProof triage mistakes and corrections. Load at the start of every triage session and selectively before evidence evaluation, severity decisions, comment writing, or batch closes. Self-expands per-analyst into ~/.hackenproof/mistakes/. Trigger on "triage", "review report", "before triage", or any HackenProof report decision.

Export ALL reports of a HackenProof program into a structured file. User chooses report detail level (Full, No Comments, or Public) and output format (Markdown, JSON, or CSV). Trigger on "export all reports to markdown", "generate md file for all program reports", "create export of all reports", "give me all reports as a file", "make a full report export", "export program reports", "final report for my program", "provide final report for program", "generate final report for program".

Verify that a security fix actually addresses the reported vulnerability without introducing new issues. Works with any local codebase — no MCP or bug bounty platform required. Trigger on "verify fix", "check fix", "is this fix correct", "review patch", "did this fix the bug".

Generate structured report handoff summaries for client teams. Use after triaging a report to produce a standardized handoff with report URL, recommended severity, bounty range, and explanation. Trigger on "handoff", "transfer to client", "prepare handoff", "client summary".

Bulk triage workflow for all assigned HackenProof programs. Discovers all open reports across every assigned program, syncs local codebases, analyzes each report, and outputs structured recommendations for human review — without applying any changes automatically.

HackenProof bug bounty triage workflow for Claude Code plugin marketplace operations. Use when analyzing security reports, validating scope and exploitability, assigning severity, detecting duplicates, setting report state, adding labels/comments, and preparing consistent triage decisions for HackenProof programs.