Run any Skill in Manus with one click

hackthebox

Stars6

Forks1

UpdatedApril 14, 2026 at 19:24

HackTheBox platform automation - login via Playwright, browse challenges/machines/labs, manage VPN connections, solve challenges using pentest skills, log all proceedings, and feed learnings back into skill improvement.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

ArianHobson333

ArianHobson333/claude-bug-bounty-stack

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

File Explorer

6 files

SKILL.md

readonly

name	hackthebox
description	HackTheBox platform automation - login via Playwright, browse challenges/machines/labs, manage VPN connections, solve challenges using pentest skills, log all proceedings, and feed learnings back into skill improvement.

HackTheBox

Execute this workflow directly — do NOT spawn a subagent. Playwright MCP tools (browser navigation, clicking, screenshots) are only available in the current session, not in subagents.

Read the agent definition and follow it step by step:

Read .claude/agents/hackthebox.md

Then execute the workflow from that file directly in this session — Phase 0 through Phase 6. You have access to all required tools: Playwright MCP (browser), Bash (including .claude/tools/env-reader.py and .claude/tools/slack-send.py), Agent (for spawning orchestrator), AskUserQuestion, Read, Write.

Key points:

You ARE the hackthebox agent — execute its workflow directly
Use Playwright MCP tools for all browser interaction (login, tab management, flag submission)
Use python3 .claude/tools/slack-send.py for Slack notifications — no agent spawn needed
Use python3 .claude/tools/env-reader.py for credentials — no agent spawn needed
Spawn Pentester Orchestrator as subagent via Agent tool
The user's request follows the /hackthebox command — pass it through

More from this repository

same repository

hunt-idor

ArianHobson333/claude-bug-bounty-stack

Systematic IDOR / BOLA hunting methodology. Use when testing any endpoint that accepts an ID, UUID, slug, filename, or reference to a user-owned object.

2026-04-146

hunt-sqli

ArianHobson333/claude-bug-bounty-stack

SQL injection hunting methodology across error-based, union, blind boolean, and time-based variants. Use when testing any input that might reach a database.

2026-04-146

hunt-ssrf

ArianHobson333/claude-bug-bounty-stack

SSRF hunting methodology with OOB detection via interactsh, cloud metadata targets, and blind SSRF techniques. Use on any feature that accepts a URL, hostname, or external reference.

2026-04-146

hunt-xss

ArianHobson333/claude-bug-bounty-stack

XSS hunting methodology — reflected, stored, and DOM — with context-aware payloads. Use when testing any input that could reach a browser.

2026-04-146

owasp-ref

ArianHobson333/claude-bug-bounty-stack

OWASP Top 10 (2021) and API Top 10 (2023) quick reference with attack patterns, test ideas, and CWE mappings. Load when hunting, code-reviewing for security, or writing bug bounty reports.

2026-04-146

report-gen

ArianHobson333/claude-bug-bounty-stack

Bug bounty report generation — structure, triager-friendly writing, CVSS scoring, and chain reporting. Use when finalizing a finding for submission.

2026-04-146

name	hackthebox
description	HackTheBox platform automation - login via Playwright, browse challenges/machines/labs, manage VPN connections, solve challenges using pentest skills, log all proceedings, and feed learnings back into skill improvement.

HackTheBox

Execute this workflow directly — do NOT spawn a subagent. Playwright MCP tools (browser navigation, clicking, screenshots) are only available in the current session, not in subagents.

Read the agent definition and follow it step by step:

Read .claude/agents/hackthebox.md

Key points:

You ARE the hackthebox agent — execute its workflow directly
Use Playwright MCP tools for all browser interaction (login, tab management, flag submission)
Use python3 .claude/tools/slack-send.py for Slack notifications — no agent spawn needed
Use python3 .claude/tools/env-reader.py for credentials — no agent spawn needed
Spawn Pentester Orchestrator as subagent via Agent tool
The user's request follows the /hackthebox command — pass it through