skills/shared-skill-creator/SKILL.md
Create or update shared skills in the correct project repo, then commit, push, and run aiskillsync when configured.
npx skillsauth add ghostonbutterbread/bug-bounty-harness shared-skill-creatorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use when creating or updating a skill that should live in a project repository and be synced into provider skill directories.
/shared-skill-creator <project> <skill-name> [intent...]
<project> can be a configured aiskillsync bridge name such as bounty-harness or ai-policies, a local repo path, or a GitHub repo URL.
~/.config/aiskillsync/config.yaml.skills_path.AGENTS.md if presentSKILL_REGISTRY.md or equivalent if presentskills/*/SKILL.mdprompts/*-playbook.md when the repo uses playbooksgit status --short --branch and avoid unrelated dirty files.skills/{skill-name}/SKILL.md using the local repo's skill layout.prompts/{skill-name}-playbook.md for reusable methodologyskills/{skill-name}/references/ for larger reference docsskills/{skill-name}/scripts/ for deterministic helpersaiskillsync sync all --repo <bridge-name>SKILL.md lean. Move long technique docs into a playbook or references.aiskillsync over copying provider skills by hand.documentation
Use when attacker-controlled input is saved and rendered later in a profile, comment, title, notification, admin view, export, email, feed, upload metadata, or other stored render surface.
content-media
Use when attacker-controlled input appears in the immediate HTTP response or browser-rendered page and needs reflected XSS context classification, payload selection, mutation, and browser verification.
data-ai
Use when inspecting proxy traffic from PwnFox-profiled browser sessions, filtering Caido/Burp/proxy history by X-PwnFox-Color, or interpreting user phrases like 'Red session' as a distinct browser/auth/profile lane.
tools
# LFI — Local File Inclusion Bypass ## What It Does Tests LFI bypass techniques: path traversal, null bytes, wrappers, log poisoning. Load `general-security-testing-policy`, `live-testing-policy`, and `injection-testing-policy` before live testing. For file/path sinks, absence of an immediate file read or response delta is not a stop reason by itself; use the policy to reason about path normalization, extension allowlists, wrappers, encoding, parser differences, and stack-specific proof ladder