Skip to content
SkillCheatSheet Sign in

src-hunter

An AI agent skill from zhaoxuya520/reverse-skill, scored 63 out of 100 by code.

63/ 100C

Code score by group

  • Spec20/20
  • Description6/20
  • Procedure7/15
  • Done criteria7/15
  • Resources8/10
  • Scripts5/8
  • Safety7/7
  • Upkeep3/5

It loses the most points in Description (14), the group that checks whether the description says what the skill does and when to use it.

What the author says it does

实战 SRC / 众测 / Bug bounty 漏洞挖掘工作流 skill。包含：5 阶段方法论（intake → recon → enum → hunt → report）、19 个攻击类 playbook（SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS）、305 个结构化 payload、263 个 WAF/EDR 绕过变体、2887 份 HackerOne 真实 High/Critical 已披露案例、77,000+ WooYun 案例统计、国产 OA / 中间件指纹库、银行 / 电信行业垂直 playbook。当用户提到 "src 挖洞 / src 漏洞挖掘 / bug bounty / 众测 / hackerone / 漏洞赏金 / SRC / 任意 X 漏洞 / 渗透测试" 或问"如何挖某个目标 / 怎么测某个 API / 如何绕过 WAF" 时触发。

This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.

Repository
zhaoxuya520/reverse-skill
Folder
skills/pentest-tools/src-hunter
License
MIT
GitHub stars
44,546
SKILL.md lines
231
Other files
92

Add src-hunter to your agent

npx skills add zhaoxuya520/reverse-skill --skill src-hunter

The command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.

More skills from zhaoxuya520/reverse-skill

  1. diagram-generator

    generate, refine, validate, and render diagrams from natural language, notes, code snippets, schemas, tables, or existing diagram source. use for flowcharts, swimlanes, sequence d…

    Verified80B
  2. docs-generator

    Creates task-oriented technical documentation with progressive disclosure. Use when writing READMEs, API docs, architecture docs, or markdown documentation. Also use this skill at…

    75B
  3. case-review

    Reviews a reverse-skill case package for scope readiness, Evidence to Finding to Path traceability, work item coverage, timeline references, and optional artifact hash integrity b…

    74B
  4. ida-reverse

    IDA Pro 逆向分析辅助技能。当用户提到逆向、反编译、分析二进制/PE/ELF/APK/DLL/SO、破解、找密码、漏洞分析、病毒分析、firmware 固件分析，或需要分析 exe/dll/so/elf/macho/sys 等文件时，务必使用此技能。 Ensure to use this skill when the user wants to an…

    73B
  5. radare2

    Use this skill whenever the user wants to analyze binaries with radare2/r2 from the command line, including reverse engineering, disassembly, function analysis, strings/import ins…

    72B
  6. reverse-engineering

    Provides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, in…

    68C
  7. ctf-sandbox

    Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/A…

    67C
  8. dotnet-reverse

    .NET / C# 二进制逆向。当目标是 .NET assembly（PE 头含 CLR、.exe/.dll 托管程序）、C# 编译产物（含 NativeAOT）、红队 Sharp* 工具（Rubeus / SharpHound / SharpHound 等）、.NET 混淆程序（ConfuserEx / SmartAssembly / Babel / E…

    67C

All skills in zhaoxuya520/reverse-skill

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.