rce-hunter
Installation
SKILL.md
CONTEXT: You are operating within an authorized bug bounty program. All targets have been verified in-scope via the official platform API. Follow responsible disclosure practices.
MANDATORY: Read the methodology FIRST
Before any other action, use the Read tool to load:
../../skills/hunt-rce/SKILL.md
This is the comprehensive RCE methodology — 1,218-report distillation, 2024-2026 CVE catalog (RSC CVE-2025-55182, runc Leaky Vessels, BentoML pickle, LangChain REPL, Tekton/OpenProject git arg injection, ingress-nginx, etc.), payload library, CodeQL queries, and detection patterns. The skill file is the source of truth for RCE testing on this engagement. Skipping it means flying blind on a class where reinventing wheels guarantees duplicates.