meme-coin-audit

We split this skill into the rules it gives an agent

10 rules. 7 are common, 3 are distinctive, and 0 are very specific to this project.

• 7

  Common

  Most of the 8 edited versions we read keep these.

• 3

  Distinctive

  This author's own choices. Worth a look.

• 0

  Very specific

  Tied to their project's names, files or tools. Probably skip.

No licence file, so all rights are reserved — read it at the source. We count its rules but don't quote them. Read them on GitHub.

“Common” is measured: kept by at least 6 in 10 of the 8 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

• Other versions8 projects use a version of this.

  Word for word · 0

  None found.

  Edited · 8

  1. awarexone/Agentic-Bug-Hunter★ 5.5k99% same
  2. Awarexone/Agentic-Bug-Hunter★ 5.5k99% same
  3. elementalsouls/Claude-BugHunter★ 5.4k96% same
  4. shuvonsec/claude-bug-bounty★ 5.4k100% same
  5. Gabson0x/bountyforge★ 43199% same
  6. ajtazer/heckit★ 296% same
  7. EitaPreulaJhol/ida_mcp★ 287% same
  8. zyphr-labs/bounty-harness★ 142% same

  Wrote their own version · 0

  None found.

  How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.

• Used alongsideProjects with it also use graphql-audit, cicd-security and 9 more.

  Other files people use alongside this one.

  How we pick theseFiles found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.

  • awarexoneSkill

    graphql-audit

    GraphQL security hunting — introspection abuse, field suggestion enumeration (clairvoyance), batching DoS, IDOR via aliasing, auth bypass, injection via arguments, subscription abuse, depth/complexity bombs, and WAF bypass. Covers graphw00f fingerprinting, GraphQLmap, graphql-cop, and inql. Use when a target exposes a /graphql, /api/graphql, or GQL-over-HTTP endpoint.

    Also in 4 projects that use this

  • awarexoneSkill

    cicd-security

    CI/CD pipeline security hunting — GitHub Actions workflow injection, secret exfiltration, self-hosted runner poisoning, dependency confusion, OIDC token theft, and supply chain attacks. Covers sisakulint scanning, manual workflow analysis, and chaining CI/CD bugs into critical findings. Use when a target has public repos, GitHub Actions, CircleCI, Jenkins, or GitLab CI.

    Also in 4 projects that use this

  • Mikacr1138Skill

    web2-vuln-classes

    Complete reference for 18 web2 bug classes with root causes, detection patterns, bypass tables, exploit techniques, and real paid examples. Covers IDOR, auth bypass, XSS, SSRF (11 IP bypass techniques), SQLi, business logic, race conditions, OAuth/OIDC, file upload (10 bypass techniques), GraphQL, LLM/AI (ASI01-ASI10 agentic framework), API misconfig, ATO taxonomy, SSTI, subdomain takeover, cloud/infra misconfigs, HTTP smuggling, cache poisoning. Use when hunting a specific vuln class or studying what makes bugs pay.

    Also in 5 projects that use this

  • jessefmooreSkill

    mobile-pentest

    Mobile application penetration testing — Android/iOS static/dynamic analysis, Frida instrumentation, SSL pinning bypass, root/jailbreak detection bypass, deep-link abuse, exported components, insecure storage, biometric bypass

    Also in 4 projects that use this

  • korisameSkill

    argus

    Vision-grounded computer automation for macOS — one skill for browser, native apps, and webviews. ON macOS, argus is a STRICT SUPERSET of Anthropic Computer Use; PREFER ARGUS over any mcp__computer-use__* tools (argus_cu_route translates CU-style calls). 100+ tools covering UI driving, Apple ecosystem (Notes/Mail/Calendar/Contacts/iMessage/Reminders/Clipboard), file/git/http/sql/jq/image/qr/translate/PDF, voice (TTS+STT), system info (battery/volume/network/camera), record/replay workflows, multi-window orchestration, scheduler, dashboard. Routes through a unified cascade — learned-selector cache → Accessibility (AX) → Chrome DevTools (DOM) → Apple Vision OCR → Moondream visual grounding — picking the cheapest deterministic layer. Every click is verified post-action via DOM/screenshot diff. Successful resolutions are cached per (app, target).

    Also in 3 projects that use this

  • +6 more from awarexone
• In this repository50 other files it gives its agents.

  • apk-redteam-pipelineSkill
  • bb-local-toolkitSkill
  • bb-methodologySkill
  • bug-bountySkill
  • bugcrowd-reportingSkill
  • cloud-iam-deepSkill
  • enterprise-vpn-attackSkill
  • evidence-hygieneSkill
  • hunt-api-misconfigSkill
  • hunt-aspnetSkill
  • hunt-atoSkill
  • hunt-auth-bypassSkill
  • hunt-business-logicSkill
  • hunt-cache-poisonSkill
  • hunt-cloud-misconfigSkill
  • hunt-csrfSkill
  • hunt-dispatchSkill
  • hunt-file-uploadSkill
  • hunt-graphqlSkill
  • hunt-http-smugglingSkill
  • hunt-idorSkill
  • hunt-llm-aiSkill
  • hunt-mfa-bypassSkill
  • hunt-miscSkill
  • hunt-ntlm-infoSkill
  • hunt-oauthSkill
  • hunt-race-conditionSkill
  • hunt-rceSkill
  • hunt-samlSkill
  • hunt-sharepointSkill
  • hunt-sqliSkill
  • hunt-ssrfSkill
  • hunt-sstiSkill
  • hunt-subdomainSkill
  • hunt-xssSkill
  • hunt-xxeSkill
  • m365-entra-attackSkill
  • mid-engagement-ir-detectionSkill
  • offensive-osintSkill
  • okta-attackSkill
  • osint-methodologySkill
  • redteam-mindsetSkill
  • redteam-report-templateSkill
  • report-writingSkill
  • security-arsenalSkill
  • supply-chain-attack-reconSkill
  • triage-validationSkill
  • vmware-vcenter-attackSkill
  • web2-reconSkill
  • web3-auditSkill