Home / Skills / bb-methodology

bb-methodology

Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Routes to all other skills based on current hunting phase. Also use when asking "what should I do next" or "where am I in the process.

ScannedSkillSource: GitHub

5,176 stars +113 this week Updated 16d ago License MIT Context ≈111 tokens always loaded

77popular

Why this score

Stars

19/35

Usage (forks)

8/15

Upkeep

25/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 5,176 stars are split between them (about 518 each) for scoring.

Popularity score: 77/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit dce681c32a7e, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This onebb-methodology elementalsouls/Claude-BugHunter · Skill	77	★ 5.2k	≈111 always	16d ago
bb-cli davidondrej/skills · Skill Both about bb	76	★ 4.2k	≈46 always	16d ago
ad-methodology ADScanPro/Claude-AD · Skill Both about methodology	58	★ 212	≈25 always	2mo ago
fest-methodology Obedience-Corp/festival · Skill Both about methodology and phase	54	★ 77	≈59 always	16d ago
source-command-methodology-advisor FlorianBruniaux/claude-code-ultimate-guide · Skill Both about methodology	78	★ 6.2k	≈38 always	16d ago
web3-methodology-research awarexone/web3-bug-bounty-hunting-ai-skills · Skill Both about methodology and phase	57	★ 166	≈70 always	1mo ago

Install

mkdir -p .claude/skills/bb-methodology

curl -sL https://codeload.github.com/elementalsouls/Claude-BugHunter/tar.gz/dce681c32a7ee1d938f84bdbdaf367aa3d12ccd9 | tar -xz -C .claude/skills/bb-methodology --strip-components=3 "Claude-BugHunter-dce681c32a7ee1d938f84bdbdaf367aa3d12ccd9/skills/bb-methodology"

To remove it later:

rm -rf .claude/skills/bb-methodology

npx skills add elementalsouls/Claude-BugHunter --skill bb-methodology

Pinned to commit dce681c32a7e as listed by GitHub.

Context cost: ≈111 tokens loaded every session (name and description), plus ≈7.4k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Used for

Engineering › Debugging Product › Project management

Tool pages

Linear

Facts

Repo: elementalsouls/Claude-BugHunter
Stars: 5,176
Forks: 788
Last push: 2026-10-19 (16d ago)
License: MIT
Owner: elementalsouls · since 2019
Language: Python
Works with: Claude Code, Skills CLI