Hands-on SRC / crowdsourced testing / bug bounty vulnerability research workflow skill: 19 attack playbooks, 305 structured payloads, 176 WAF bypasses, 2,887 HackerOne cases, 88,000 WooYun statistics, and frontline methodology for 2026
Little-H-lying-flat/72stack-sec
Skill Claude CodeCodex
A Chinese-language workflow for authorized security testing and bug bounty work, where researchers look for and report vulnerabilities in websites, applications, and cloud systems.
Little-H-lying-flat/72stack-sec
Skill Claude CodeCodex
Explain, inspect, configure, and troubleshoot Cloud Agent development environments. Use when the user asks about environment setup, changing/improving the environment, or triggering/testing a build.
Little-H-lying-flat/72stack-sec
Skill Claude CodeCodex
A document generator for JSRC vulnerability reports. JSRC is a security reporting programme, and the tool creates a formatted DOCX Word file using a fixed submission format.
Little-H-lying-flat/72stack-sec
Skill Claude Code
A targeted guide for investigating WeChat mini-program packages and web views. WeChat mini-programs are small apps that run inside WeChat, and an AppID identifies one of them.
Little-H-lying-flat/72stack-sec
Skill Claude CodeCodex
A source-code security audit workflow for local or open-source web applications. It checks for issues such as missing access controls, server-side request forgery, cross-site scripting, and command execution.
Little-H-lying-flat/72stack-sec
Skill Claude CodeCodex
A static security-checking workflow for WeChat mini-program packages. WeChat mini-programs are small applications that run inside WeChat, and static checking examines files without running the application.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: