Bug Bounty Report Template

该 Skill 通过本地 Python 脚本根据平台、漏洞类型、标题、严重性和目标生成结构化的漏洞赏金报告，包含复现步骤、影响、修复建议、CWE 映射与 CVSS 辅助信息，并支持输出到文件或自定义模板。

hostilespider

热度 45.78

最近更新 2026-05-11 17:38:03

分类：安全依赖：代码执行 / 读写文件应用场景：报告撰写 / 模板

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add bb-report-template

Metadata

name: bb-report-template
description: Generate professional bug bounty reports for HackerOne, Bugcrowd, and other platforms. Pre-filled templates with CWE mapping, reproduction steps, and severity assessment.
metadata: {"openclaw":{"emoji":"🐛","requires":{"bins":["python3"]}}}

Bug Bounty Report Template Generator

Generate professional, platform-ready bug bounty reports. Supports HackerOne, Bugcrowd, and generic formats with automatic CWE mapping and severity assessment.

Quick Start

python3 {baseDir}/scripts/generate-report.py --platform hackerone --title "XSS in Profile Page" --severity medium
python3 {baseDir}/scripts/generate-report.py --platform bugcrowd --type idor --target example.com

Options

--platform PLATFORM — Target platform: hackerone, bugcrowd, generic (default: generic)
--type TYPE — Vulnerability type: xss, idor, sqli, ssrf, rce, auth-bypass, info-disclosure, csrf, redirect, custom
--title TITLE — Report title
--severity LEVEL — critical, high, medium, low, info
--target DOMAIN — Target domain/application
--output FILE — Output file path (default: stdout)
--template TEMPLATE — Custom template file

Features

Automatic CWE mapping for common vulnerability types
CVSS score calculation helper
Pre-formatted reproduction steps sections
Impact assessment templates
Mitigation suggestions
Scope validation reminders

Example Output Structure

# [Title]

## Summary
[Brief description]

## Steps to Reproduce
1. Navigate to...
2. Intercept request...
3. Modify parameter...

## Impact
[Business impact description]

## Remediation
[Suggested fix]

## References
- CWE-XXX: [Description]
- CVSS: [Score]