OpenClaw

bounty-hunter

Automated smart contract bug bounty hunting. Scans Immunefi/Code4rena targets with Slither static analysis, triages findings with local LLMs, and generates PoC templates. Zero API cost for scanning phase.

chipp110 来源安装数☆ 0 仓库 Starsv1.0.0

查看来源 ↗安装与使用 SKILL.md ↗

安装与使用

请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。

SkillHub CLI

skillhub install chipp11/angus-bounty-hunter

打开来源仓库，查看说明和兼容环境后，按来源提供的命令或步骤安装。

将来源链接提供给你的 Agent，让它先读取说明、核对依赖，并向你说明将执行的安装步骤。

查看来源 ↗使用指南

技能说明

Bounty Hunter

Automated smart contract vulnerability scanner for bug bounty programs. Uses free tools (Slither + local LLMs) for the heavy lifting, saves expensive models for PoC writing.

Requirements

slither-analyzer (pip): Static analysis
solc-select (pip): Solidity compiler management
Node.js: For script execution
Optional: Ollama with any code model for local triage

Quick Start

# Scan a repo
bash scripts/scan.sh <github-repo-url> [src-dir]

# Triage findings (uses local LLM if available, otherwise prints raw)
bash scripts/triage.sh <scan-output.json>

# Generate PoC template for a finding
bash scripts/poc-template.sh <finding-id> <contract-address>

Workflow

Target Selection — Check Immunefi/Code4rena for active programs
Clone & Scan — scan.sh clones the repo, installs solc, runs Slither
Triage — triage.sh filters HIGH/MEDIUM findings, removes known false positives
Deep Dive — Only read code that Slither flagged (save your tokens)
PoC — Use poc-template.sh to generate Foundry test scaffolding
Submit — Write up finding on Immunefi/Code4rena

Target Selection Criteria

Before scanning, check:

Scope last updated within 30 days (fresh code = more bugs)
Past payouts > $50K (they actually pay)
GitHub repo in scope (not just deployed addresses)
Solidity-based (Slither only works with Solidity)

Anti-Patterns

Don't read entire codebases manually — let Slither scan first
Don't spend > 1 hour on a target without a concrete lead
Don't submit known issues (check past reports first)
Don't ignore test coverage — untested code is where bugs hide

来源信息

Source: github
Repository: openclaw/skills
Path: skills/chipp11/angus-bounty-hunter
Version: 1.0.0
Commit: 5f198c27fa2474b92a99b2b0d222dd4265fccfaa
分类来源: rules
状态: active
可见性: public

这些信息来自收录时的来源分析，可能滞后；使用前请核对最新来源文件。

来源内容

SKILL.md

# Bounty Hunter

Automated smart contract vulnerability scanner for bug bounty programs. Uses free tools (Slither + local LLMs) for the heavy lifting, saves expensive models for PoC writing.

## Requirements

- `slither-analyzer` (pip): Static analysis
- `solc-select` (pip): Solidity compiler management  
- Node.js: For script execution
- Optional: Ollama with any code model for local triage

## Quick Start

```bash
# Scan a repo
bash scripts/scan.sh <github-repo-url> [src-dir]

# Triage findings (uses local LLM if available, otherwise prints raw)
bash scripts/triage.sh <scan-output.json>

# Generate PoC template for a finding
bash scripts/poc-template.sh <finding-id> <contract-address>
```

## Workflow

1. **Target Selection** — Check Immunefi/Code4rena for active programs
2. **Clone & Scan** — `scan.sh` clones the repo, installs solc, runs Slither
3. **Triage** — `triage.sh` filters HIGH/MEDIUM findings, removes known false positives
4. **Deep Dive** — Only read code that Slither flagged (save your tokens)
5. **PoC** — Use `poc-template.sh` to generate Foundry test scaffolding
6. **Submit** — Write up finding on Immunefi/Code4rena

## Target Selection Criteria

Before scanning, check:
- Scope last updated within 30 days (fresh code = more bugs)
- Past payouts > $50K (they actually pay)
- GitHub repo in scope (not just deployed addresses)
- Solidity-based (Slither only works with Solidity)

## Anti-Patterns

- Don't read entire codebases manually — let Slither scan first
- Don't spend > 1 hour on a target without a concrete lead
- Don't submit known issues (check past reports first)
- Don't ignore test coverage — untested code is where bugs hide

搜索