The Agent Skills Directory

[SAFE]: The skill includes references to book.hacktricks.xyz, a widely recognized and reputable cybersecurity reference for educational purposes. While automated scanners may flag the domain due to its technical content regarding vulnerabilities, its inclusion in a bug bounty toolkit is contextually appropriate and does not represent a malicious threat.
[SAFE]: The skill contains instructional rules and methodologies (e.g., "CRITICAL RULES", "7-Question Gate") that guide the agent's professional persona for security research. These are not prompt injections designed to bypass safety filters, but rather operational constraints for the bug bounty hunting task.
[SAFE]: The content provides command-line examples for industry-standard security tools such as ffuf, sqlmap, nuclei, and semgrep. These tools are listed for legitimate security testing and are consistent with the skill's stated purpose.
[SAFE]: Mentioned patterns for sensitive data exposure (e.g., pk_live_, .env files, and secrets.TOKEN) are used as examples of vulnerabilities to hunt for in target systems, not as actual hardcoded credentials or exfiltration logic within the skill itself.

bb-local-toolkit