agentCLAWHUBUnverified

Bug Bounty Triage

Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report p... Skill: Bug Bounty Triage Owner: n8gendegen Summary: Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report p... Tags: atlas:1.0.0, bounty-triage:1.0.0, bug-bounty:1.0.0, bug-bounty-triage:1.0.0, cantina:1.0.0, code4rena:1.0.0, defi-bounty:1.0.0, hackenproof:1.0.0, latest:1.0.0, sherlock:1.0.0, smart-contract-audit:1.0

OpenClaw

Rank

62

Safety

84

Downloads

977

Updated

Oct 11, 2026

Version

1.0.0

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 977 downloads reported by the source. Last updated 10/11/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Oct 11, 2026
Protocol compatibility
OpenClawcompatibility · observed Oct 11, 2026
Adoption signal
977 downloadsadoption · observed Oct 11, 2026
Latest release
1.0.0release · observed May 17, 2026
Handshake status
UNKNOWNsecurity

What changed

Newest first. Only changes that point at a source are listed.

  • Release 1.0.0release

    Initial exact-match listing for bug bounty triage discovery and Atlas security ZIP funnel.

    Observed May 17, 2026 · source

Install and run

Setup complexity: low.

clawhub skill install s178kk8n3h54fa7qzx3gsf72md85y3vm:bug-bounty-triage
  1. Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/snapshot"

Run-check

$0.02 USD

1 measured facts are behind this paywall: success rate and latency, uptime and estimated cost, when not to use it, how to call it, benchmark scores.

Agents pay $0.02 in USDC. A card payment is $0.50, the smallest a card allows.

Documentation

CLAWHUB

6,969 characters of source documentation, loaded on request.

Extracted files

4 files captured from the source.

SKILL.md

---
name: Bug Bounty Triage
slug: bug-bounty-triage
version: 1.0.0
description: Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report prep. Use for bug bounty, bug bounty triage, smart contract bounty, DeFi bounty, finding reports, and audit target prioritization.
homepage: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=bug-bounty-triage
changelog: "Initial exact-match ClawHub listing for bug bounty triage discovery and Atlas $49/$150 security ZIP funnel."
tags:
  - bug-bounty
  - bug-bounty-triage
  - bounty-triage
  - bounty-hunter
  - vulnerability-report
  - finding-report
  - smart-contract-audit
  - smart-contract-bounty
  - defi-bounty
  - defi-audit
  - solidity-audit
  - code4rena
  - sherlock
  - hackenproof
  - cantina
  - audit-checklist
  - atlas
  - latest
metadata:
  AtlasAgentSuite:
    tier: free
    use_cases:
      - bug bounty target triage
      - smart contract bounty checklist
      - finding report preparation
      - paid ZIP funnel discovery
    upsells:
      - "Atlas Starter/Pro ZIP Packs ($49/$150): https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=bug-bounty-triage"
---

# Bug Bounty Triage

A practical **bug bounty triage** workflow for deciding which programs, repos, and candidate findings deserve time today.

Best for: security researchers, Code4rena wardens, Sherlock auditors, HackenProof hunters, DeFi teams, and agent operators running daily bounty scans.

## Search Keywords / Best Use Cases

- bug bounty
- bug bounty triage
- bug bounty workflow
- bug bounty checklist
- bug bounty report template
- bug bounty finding report
- bounty hunter workflow
- bounty target triage
- vulnerability report template
- security finding report
- smart contract bounty
- smart contract bug bounty
- DeFi bounty
- DeFi bug bounty
- Code4rena bounty
- Code4rena audit prep
- Sherlock audit prep
- HackenProof bounty workflow
- Cantina bounty workflow
- Solidity bounty triage
- EVM bounty workflow
- vulnerability candidate triage
- audit report template
- paid bug bounty skill pack
- Atlas bounty skill pack

## What This Free Skill Produces

- Program fit score: payout, scope, friction, repo availability, PoC feasibility
- Target priority queue for today
- Candidate finding triage rubric
- Submission-readiness checklist
- Report skeleton for credible findings

## Workflow

1. Rank active programs by payout × source access × PoC feasibility × friction.
2. Exclude paused/capped/blocked programs immediately.
3. Pick one target and build a local test harness before deep theory work.
4. Promote only candidates with clear impact and runnable evidence.
5. Draft the report only after severity and exploitability survive review.

## Upgrade: Atlas Paid ZIP Packs ($49 / $150)

This free ClawHub skill is the discovery layer. If you want the ready-to-run premium workf

README.md

# Bug Bounty Triage

Free exact-match ClawHub feeder skill for bug bounty triage and Atlas paid security ZIP funnel.

_meta.json

{
  "ownerId": "kn781dbr70kzecrypxr3g90ckn85y6ma",
  "slug": "bug-bounty-triage",
  "version": "1.0.0",
  "publishedAt": 1779028922394
}

skill-card.md

## Description:

Exact-match bug bounty triage workflow for Code4rena, Sherlock, HackenProof, Cantina-style security reviews, Solidity/EVM targets, and vulnerability report prep.

This skill is ready for commercial/non-commercial use.

## Publisher:

[n8gendegen](https://clawhub.ai/user/n8gendegen)

### License/Terms of Use:

MIT-0

## Use Case:

External security researchers, bounty hunters, smart contract auditors, DeFi teams, and agent operators use this skill to rank bounty targets, triage candidate findings, prepare submission checklists, and draft credible finding reports.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: Triage guidance may be incorrect for a specific program scope, rule set, or severity model.

Mitigation: Verify bounty scope, program rules, severity, exploitability, and disclosure requirements before acting on or submitting findings.

Risk: Finding drafts could expose secrets, private keys, or undisclosed exploit details if copied into public examples.

Mitigation: Remove secrets and private exploit details, and share only information approved for responsible disclosure.

Risk: The skill includes a disclosed commercial upsell link.

Mitigation: Treat the link as optional commercial material and evaluate it separately from the free workflow guidance.

## Reference(s):

- [Atlas Agent Suite skill page](https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=bug-bounty-triage)

## Skill Output:

**Output Type(s):** [Text, Markdown, Guidance, Analysis]

**Output Format:** [Markdown guidance with scoring rubrics, checklists, priority queues, and report skeletons]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [No executable output; users should manually verify bounty scope, program rules, severity, and disclosure requirements.]

## Skill Version(s):

1.0.0 (source: frontmatter and release evidence)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.
Github ReposUpdated 3d agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/n8gendegen/skills/bug-bounty-triage",
      "sourceUrl": "https://clawhub.ai/n8gendegen/skills/bug-bounty-triage",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-11T23:24:32.148Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-10-11T23:24:32.148Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "977 downloads",
      "href": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
      "sourceUrl": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-11T23:24:32.148Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "1.0.0",
      "href": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
      "sourceUrl": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-05-17T14:42:02.394Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 1.0.0",
      "description": "Initial exact-match listing for bug bounty triage discovery and Atlas security ZIP funnel.",
      "href": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
      "sourceUrl": "https://clawhub.ai/n8gendegen/bug-bounty-triage",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-05-17T14:42:02.394Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 12, 2026.

For crawlers

This page is free to read. The run-check above is the only paid part, and it answers HTTP 402 until it is paid. Everything else here is public.

  • One record, as JSON: card, facts, snapshot, contract, trust, changes, warnings, seen by, disagreements.
  • Every agent, one feed: /.well-known/ai-catalog.json
  • What this site sells, and the price: /.well-known/x402
  • Paid run-check: /api/v1/agents/clawhub-n8gendegen-bug-bounty-triage/run-check

Sponsored

Ads related to Bug Bounty Triage and adjacent AI workflows.