Bug Bounty Triage
Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report p... Skill: Bug Bounty Triage Owner: n8gendegen Summary: Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report p... Tags: atlas:1.0.0, bounty-triage:1.0.0, bug-bounty:1.0.0, bug-bounty-triage:1.0.0, cantina:1.0.0, code4rena:1.0.0, defi-bounty:1.0.0, hackenproof:1.0.0, latest:1.0.0, sherlock:1.0.0, smart-contract-audit:1.0
Rank
62
Safety
84
Downloads
977
Updated
Oct 11, 2026
Version
1.0.0
Source
CLAWHUB
About
What it does, and when to use it.
Capability contract not published. No trust telemetry is available yet. 977 downloads reported by the source. Last updated 10/11/2026.
Avoid when
- Contract metadata is missing or unavailable for deterministic execution.
Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing
Public facts
Every fact links back to the source it came from.
- Vendor
- Clawhubvendor · observed Oct 11, 2026
- Protocol compatibility
- OpenClawcompatibility · observed Oct 11, 2026
- Adoption signal
- 977 downloadsadoption · observed Oct 11, 2026
- Latest release
- 1.0.0release · observed May 17, 2026
- Handshake status
- UNKNOWNsecurity
What changed
Newest first. Only changes that point at a source are listed.
Release 1.0.0release
Initial exact-match listing for bug bounty triage discovery and Atlas security ZIP funnel.
Observed May 17, 2026 · source
Install and run
Setup complexity: low.
clawhub skill install s178kk8n3h54fa7qzx3gsf72md85y3vm:bug-bounty-triage- Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
- Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.
Contract: missing
curl -s "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/snapshot"
Run-check
$0.02 USD1 measured facts are behind this paywall: success rate and latency, uptime and estimated cost, when not to use it, how to call it, benchmark scores.
Agents pay $0.02 in USDC. A card payment is $0.50, the smallest a card allows.
Documentation
CLAWHUB
6,969 characters of source documentation, loaded on request.
Extracted files
4 files captured from the source.
SKILL.md
---
name: Bug Bounty Triage
slug: bug-bounty-triage
version: 1.0.0
description: Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report prep. Use for bug bounty, bug bounty triage, smart contract bounty, DeFi bounty, finding reports, and audit target prioritization.
homepage: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=bug-bounty-triage
changelog: "Initial exact-match ClawHub listing for bug bounty triage discovery and Atlas $49/$150 security ZIP funnel."
tags:
- bug-bounty
- bug-bounty-triage
- bounty-triage
- bounty-hunter
- vulnerability-report
- finding-report
- smart-contract-audit
- smart-contract-bounty
- defi-bounty
- defi-audit
- solidity-audit
- code4rena
- sherlock
- hackenproof
- cantina
- audit-checklist
- atlas
- latest
metadata:
AtlasAgentSuite:
tier: free
use_cases:
- bug bounty target triage
- smart contract bounty checklist
- finding report preparation
- paid ZIP funnel discovery
upsells:
- "Atlas Starter/Pro ZIP Packs ($49/$150): https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=bug-bounty-triage"
---
# Bug Bounty Triage
A practical **bug bounty triage** workflow for deciding which programs, repos, and candidate findings deserve time today.
Best for: security researchers, Code4rena wardens, Sherlock auditors, HackenProof hunters, DeFi teams, and agent operators running daily bounty scans.
## Search Keywords / Best Use Cases
- bug bounty
- bug bounty triage
- bug bounty workflow
- bug bounty checklist
- bug bounty report template
- bug bounty finding report
- bounty hunter workflow
- bounty target triage
- vulnerability report template
- security finding report
- smart contract bounty
- smart contract bug bounty
- DeFi bounty
- DeFi bug bounty
- Code4rena bounty
- Code4rena audit prep
- Sherlock audit prep
- HackenProof bounty workflow
- Cantina bounty workflow
- Solidity bounty triage
- EVM bounty workflow
- vulnerability candidate triage
- audit report template
- paid bug bounty skill pack
- Atlas bounty skill pack
## What This Free Skill Produces
- Program fit score: payout, scope, friction, repo availability, PoC feasibility
- Target priority queue for today
- Candidate finding triage rubric
- Submission-readiness checklist
- Report skeleton for credible findings
## Workflow
1. Rank active programs by payout × source access × PoC feasibility × friction.
2. Exclude paused/capped/blocked programs immediately.
3. Pick one target and build a local test harness before deep theory work.
4. Promote only candidates with clear impact and runnable evidence.
5. Draft the report only after severity and exploitability survive review.
## Upgrade: Atlas Paid ZIP Packs ($49 / $150)
This free ClawHub skill is the discovery layer. If you want the ready-to-run premium workfREADME.md
# Bug Bounty Triage Free exact-match ClawHub feeder skill for bug bounty triage and Atlas paid security ZIP funnel.
_meta.json
{
"ownerId": "kn781dbr70kzecrypxr3g90ckn85y6ma",
"slug": "bug-bounty-triage",
"version": "1.0.0",
"publishedAt": 1779028922394
}skill-card.md
## Description: Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report prep. This skill is ready for commercial/non-commercial use. ## Publisher: [n8gendegen](https://clawhub.ai/user/n8gendegen) ### License/Terms of Use: MIT-0 ## Use Case: External security researchers, bounty hunters, smart contract auditors, DeFi teams, and agent operators use this skill to rank bounty targets, triage candidate findings, prepare submission checklists, and draft credible finding reports. ### Deployment Geography for Use: Global ## Known Risks and Mitigations: Risk: Triage guidance may be incorrect for a specific program scope, rule set, or severity model. Mitigation: Verify bounty scope, program rules, severity, exploitability, and disclosure requirements before acting on or submitting findings. Risk: Finding drafts could expose secrets, private keys, or undisclosed exploit details if copied into public examples. Mitigation: Remove secrets and private exploit details, and share only information approved for responsible disclosure. Risk: The skill includes a disclosed commercial upsell link. Mitigation: Treat the link as optional commercial material and evaluate it separately from the free workflow guidance. ## Reference(s): - [Atlas Agent Suite skill page](https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=bug-bounty-triage) ## Skill Output: **Output Type(s):** [Text, Markdown, Guidance, Analysis] **Output Format:** [Markdown guidance with scoring rubrics, checklists, priority queues, and report skeletons] **Output Parameters:** [1D] **Other Properties Related to Output:** [No executable output; users should manually verify bounty scope, program rules, severity, and disclosure requirements.] ## Skill Version(s): 1.0.0 (source: frontmatter and release evidence) ## Ethical Considerations: Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.
AionUi
Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!
activepieces
AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
cherry-studio
AI productivity studio with smart chat, autonomous agents, and 300+ assistants.
CopilotKit
The Frontend for Agents & Generative UI. React + Angular
Machine-readable data
The same record, as JSON, for agents and crawlers.
- Card JSON
- Facts JSON
- Snapshot JSON
- Contract JSON
- Trust JSON
- Changes JSON
- Warnings JSON
- Seen by JSON
- Disagreements JSON
{
"facts": [
{
"factKey": "vendor",
"category": "vendor",
"label": "Vendor",
"value": "Clawhub",
"href": "https://clawhub.ai/n8gendegen/skills/bug-bounty-triage",
"sourceUrl": "https://clawhub.ai/n8gendegen/skills/bug-bounty-triage",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-11T23:24:32.148Z",
"isPublic": true
},
{
"factKey": "protocols",
"category": "compatibility",
"label": "Protocol compatibility",
"value": "OpenClaw",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/contract",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/contract",
"sourceType": "contract",
"confidence": "medium",
"observedAt": "2026-10-11T23:24:32.148Z",
"isPublic": true
},
{
"factKey": "traction",
"category": "adoption",
"label": "Adoption signal",
"value": "977 downloads",
"href": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
"sourceUrl": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-11T23:24:32.148Z",
"isPublic": true
},
{
"factKey": "latest_release",
"category": "release",
"label": "Latest release",
"value": "1.0.0",
"href": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
"sourceUrl": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-05-17T14:42:02.394Z",
"isPublic": true
},
{
"factKey": "handshake_status",
"category": "security",
"label": "Handshake status",
"value": "UNKNOWN",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/trust",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/trust",
"sourceType": "trust",
"confidence": "medium",
"observedAt": null,
"isPublic": true
}
],
"events": [
{
"eventType": "release",
"title": "Release 1.0.0",
"description": "Initial exact-match listing for bug bounty triage discovery and Atlas security ZIP funnel.",
"href": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
"sourceUrl": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-05-17T14:42:02.394Z",
"isPublic": true
}
]
}Record generated Oct 12, 2026.
For crawlers
This page is free to read. The run-check above is the only paid part, and it answers HTTP 402 until it is paid. Everything else here is public.
- One record, as JSON: card, facts, snapshot, contract, trust, changes, warnings, seen by, disagreements.
- Every agent, one feed: /.well-known/ai-catalog.json
- What this site sells, and the price: /.well-known/x402
- Paid run-check: /api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/run-check
