Sync bug bounty program data: $ARGUMENTS
Parse the arguments as:
- Use the
bounty-platforms MCP server tool sync_program with the platform and program handle. This fetches scope, policy, and hacktivity and writes them to the current directory.
- After sync completes, run
uv run python3 ../../tools/brain.py init if brain isn't initialized yet.
- Read the generated
scope.yaml and hacktivity.md files.
- Update the brain with key intelligence from hacktivity:
- Run
uv run python3 ../../tools/brain.py log "Synced program data from <platform>/<program>"
- If hacktivity shows common vulnerability types, note them as priority areas
- If hacktivity shows many duplicates of a type, note them as areas to avoid
- Summarize: scope overview, policy highlights (restrictions, safe harbor), and hacktivity patterns (most common vuln types, average bounties).
Top-Tier Sync Standard
Policy is hunting input, not paperwork.
Extract and persist:
- exact in-scope assets, wildcard rules, mobile/API/cloud qualifiers, and third-party exclusions
- required headers, user-agent, testing accounts, sandbox rules, rate limits, and forbidden actions
- severity exclusions and never-pay classes
- payout hints from hacktivity: accepted classes, duplicate-heavy classes, bounty tiers, triage language
- newly added or removed assets since last sync
End with a hunt bias: where the program appears to pay, where it appears saturated, and what proof standard the policy implies.
1---2name: sync-23description: Sync program scope, policy, and hacktivity from a bug bounty platform. Usage: /sync hackerone tesla or /sync bugcrowd uber4---56Sync bug bounty program data: $ARGUMENTS78Parse the arguments as: <platform> <program_handle>9101. Use the `bounty-platforms` MCP server tool `sync_program` with the platform and program handle. This fetches scope, policy, and hacktivity and writes them to the current directory.112. After sync completes, run `uv run python3 ../../tools/brain.py init` if brain isn't initialized yet.123. Read the generated `scope.yaml` and `hacktivity.md` files.134. Update the brain with key intelligence from hacktivity:14 - Run `uv run python3 ../../tools/brain.py log "Synced program data from <platform>/<program>"`15 - If hacktivity shows common vulnerability types, note them as priority areas16 - If hacktivity shows many duplicates of a type, note them as areas to avoid175. Summarize: scope overview, policy highlights (restrictions, safe harbor), and hacktivity patterns (most common vuln types, average bounties).1819## Top-Tier Sync Standard2021Policy is hunting input, not paperwork.2223Extract and persist:24- exact in-scope assets, wildcard rules, mobile/API/cloud qualifiers, and third-party exclusions25- required headers, user-agent, testing accounts, sandbox rules, rate limits, and forbidden actions26- severity exclusions and never-pay classes27- payout hints from hacktivity: accepted classes, duplicate-heavy classes, bounty tiers, triage language28- newly added or removed assets since last sync2930End with a hunt bias: where the program appears to pay, where it appears saturated, and what proof standard the policy implies.
h-mmer