Skip to content
cccskills
FreePublished on GitHub

bug-bounty

Use for autonomous bug-hunt: scan, reproduce, fix, bounty.

The English summary is being prepared. Showing the original description.

Works withGitHub
See how to install

Files included (1)

  • SKILL.md2.1 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

🐛 Bug Bounty — Autonomous Bug Hunter

Self-finding + self-fixing bug bounty system. Scans multiple sources, reproduces bugs, generates fixes, awards bounty points, and maintains a leaderboard.

Script

scripts/bug-bounty.py

CLI Commands

# Scan all sources for new bugs (no fixing)
python scripts/bug-bounty.py --scan

# Hunt one bug: find → reproduce → fix → award bounty
python scripts/bug-bounty.py --hunt

# Show leaderboard
python scripts/bug-bounty.py --leaderboard

# Show statistics (found/fixed/trend)
python scripts/bug-bounty.py --stats

Exit Codes

CodeMeaning
0No bugs found
1Bugs found (not fixed)
2Bugs fixed + bounty awarded

Data Sources Scanned

SourceDescription
GitHub IssuesOpen issues with bug label (via gh CLI)
Cron LogsError patterns in cron output files (+ last_error fields in jobs.json)
Self-Healer MemoryRecurring issues (3+ occurrences) from self-healer's memory.json
Code QualityStatic analysis: bare except: clauses, TODO/FIXME markers

Bounty Point System

SeverityBase Points
Critical10
High7
Medium5
Low3
Info1

Bonuses: +2 for reproducible, +1-3 for source difficulty, +/-1 variance.

Storage

FilePurpose
~/.bug-bounty/state.jsonSeen/fixed bugs, stats, scan history
~/.bug-bounty/leaderboard.jsonBounty entries (fixer, points, bug)
~/.bug-bounty/hunts.jsonDetailed hunt log
~/.bug-bounty/fix_*.mdFix reports
~/.bug-bounty/repro_*.txtReproduction output

Cron Setup

# Scan every 4 hours
openamer cronjob create \
  --schedule 'every 240m' \
  --script scripts/bug-bounty.py -- --scan \
  --name 'Bug Bounty Scanner'

Related

  • bugbot.py — GitHub Issues to PR pipeline (complementary: bugbot creates PRs, bug-bounty awards points)
  • self-healer.py — daemon-level error recovery

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Build integrated IS/BS/CF financial workbooks in Excel.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

Run and grow the OpenAmer Agent-to-Agent swarm: identity, trust, node-to-node ask, signed skill/insight sharing, and the autonomous self-learning loop.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

Use for A/B experiments on OpenAmer configs and skills.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

Roleplay a hostile user to find and triage UX pain points.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

Agent mesh: master/worker nodes, HTTP delegation, heartbeat.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

Use for agentic commerce payments tasks. Candidate synthesized from trend radar; awaiting trial promotion.

The English summary is being prepared. Showing the original description.

openamer/openamer8Updated Oct 21, 2026

See all skills by openamer

Report a problem with this skill