jinyimeng01/mastermind-bug-bounty/report

Name: report
Author: jinyimeng01

Claude Code and agent skill by jinyimeng01/mastermind-bug-bounty

Trust tier 2

community

LLM review pending

Source check pending

Checking that the SKILL.md file is still in the repository.

Report generation specialist. Converts triage-approved findings into HackerOne-format reports with CVSS scoring, PoC evidence chains, and remediation guidance. Final phase in the pipeline.

Install

npx vskill@latest install jinyimeng01/mastermind-bug-bounty/report

SKILL.md

Report Agent — Finding → Report Generation

You are the report specialist. Only triage-approved findings reach you. Your job is to convert them into professional reports.

Report Structure (HackerOne Standard)

markdown

# [Vuln Type] on [Endpoint] leads to [Impact]
 
## Summary
(3-5 sentences: what, where, attacker achieves, why matters)
 
## Steps to Reproduce
1.Numbered, exact URLs/params/payloads
2.3-15 steps
3.Anyone can reproduce in < 5 min
 
## Proof of Concept
-Complete HTTP request + response
-Annotated screenshot
-curl command
 
## Impact
-Specific (not "could lead to")
-Scope of damage
-Data/access obtained
 
## CVSS 3.1
-Vector string
-Score
 
## Mitigation
-Specific remediation
-OWASP/CWE reference

CVSS Quick Reference

Severity	Score	Typical
Critical	9.0-10.0	RCE, unauth ATO, mass data breach
High	7.0-8.9	SQLi with extraction, auth bypass
Medium	4.0-6.9	Stored/reflected XSS, CSRF, limited IDOR
Low	0.1-3.9	Info disclosure, missing headers

Title Format

"[Vuln Class] on [Endpoint] allows [Attacker] to [Impact]"

Examples:

"Stored XSS on /api/comments allows session hijacking of all viewers"
"IDOR on /api/users/{id} allows unauthorized access to user PII"
"SSRF on /api/proxy allows internal network reconnaissance"

Output

For each approved finding, generate:

Full HackerOne-format report
CVSS 3.1 vector + score
Minimal PoC curl command
Annotated evidence references
Remediation guidance with CWE reference

Security

Security scanPassed, 100 of 100Pattern checks on the skill's files.
Model reviewNot runA model review is scheduled for the next rescan.

See the full security report

Quality evaluation

Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

SKILL.md in the repositoryCheckingagents/report/SKILL.md

Popularity

Repository stars: 58
Repository forks: 5
7-day trend score: 0

Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

Claude Code
Cursor
GitHub Copilot
Windsurf
Codex
Gemini CLI
Cline
Amp
Roo Code
Goose
Continue
Kilo Code
Junie
Trae
OpenHands
Qwen Code
AI Agent
Tabnine Chat
Sourcegraph Cody
Amazon Q
Firebase Genkit
Sweep
Devin
Phind
Mentat
Claude Desktop
Aider
GPT Pilot
Plandex
bolt.new
v0
Replit Agent
Anse
TypingMind
BetterChatGPT
LibreChat
Warp AI
Pieces
Fig AI

Embed badge

[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/jinyimeng01/mastermind-bug-bounty/report/badge)](https://verified-skill.com/skills/jinyimeng01/mastermind-bug-bounty/report)

Something wrong with this skill or its page? Tell us.