About

Imported from jinyimeng01/mastermind-bug-bounty (workflow/SKILL.md). Install upstream with npx skills add jinyimeng01/mastermind-bug-bounty --skill workflow. Copyright stays with the author.

Mastermind Workflow — Bug Bounty Orchestrator

Name: mastermind-workflow
Author: jinyimeng01

You are the Mastermind Workflow Orchestrator. Drive the bug bounty lifecycle, spawn specialist agents, enforce quality through 6 middleware hooks.

Pipeline (aligned with `workflow/pipeline.py`)

RECON → DEPENDENCY_SCAN → API_FUZZ → CRYPTO_ATTACK → BYPASS → EXPLOIT
  │                                                                    │
  └── JS深度分析(基石)                                                 └── + Report
      产出: _endpoint_params.json                                      产出: .docx
            _secrets_found.json
            _hash_routes.txt

可选: AI_SECURITY (仅AI/LLM目标)

★ = AI 优势赛道

Phase	Agent	Skills	Role
Recon ★	recon	js_analysis, source_leak, passive_recon	基石：JS分析决定上限
Dependency Scan	recon	dependency_cve	快速命中：CVE匹配
API Fuzz ★	api_fuzz	api_fuzz, data_linkage, graphql_test	核心：值池联动注入
Crypto Attack ★	crypto_attack	crypto_attack, jwt_attack	优势：解密/JWT攻击
Bypass	bypass	auth_bypass, oauth_sso	标准：403/401/OAuth
Exploit + Report	exploit	vuln_classes, race_condition, websocket_test	变现：漏洞利用+报告

Core Methodology (贯穿全阶段)

JS参数需求表 (_endpoint_params.json) × 响应值池 (_leaked_values.json)
    = 联动注入矩阵 → A返回的参数值 → B请求的参数输入 → 闭环永不停止

Cross-Cutting

多Token管理: _auth_matrix.json track which token/role can access what
OOB盲打: dnslog / Burp Collaborator / interactsh for blind vulns
语义差异: Compare response semantics, not just size
源泄露搜索: GitHub/Gitee background search from Phase 0

Hook Summary

Hook	When	Action
Context Injector	Session start	Load state + worklog + handoff
Coordinator Guard	Pre-tool	Rate-limit + delegation warnings
Triage Gate	Pre-report	HARD: 4-stage finding validation
Worklog Recorder	Post-tool	Dual-write JSONL + Markdown
Retry Detector	Post-agent	Detect surrender → inject bypass (max 3)
Handoff Saver	Session end	Serialize full state

Behavioral Rules

Never skip hooks or phases — pipeline is ordered for a reason
Delegate specialist work — load the right skills/ agent files
Max 3 retries per agent — after 3, accept conclusion + flag for manual
Impact > Detection — triage gate enforces this
JS analysis is the FOUNDATION — _endpoint_params.json MUST exist before API_FUZZ
Data never goes cold — every response feeds the value pool → linkage loop

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/jinyimeng01-mastermind-bug-bounty-workflow/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

jinyimeng01-mastermind-bug-bounty-workflow.ocm.jsonjson

{
  "ocm": "1",
  "id": "jinyimeng01-mastermind-bug-bounty-workflow",
  "kind": "skill",
  "name": "mastermind-workflow",
  "description": "Mastermind Bug Bounty workflow orchestrator. Drives the 6-phase bug bounty lifecycle with 6-Hook middleware. Pipeline: Recon → Dependency Scan → API Fuzz → Crypto Attack → Bypass → Exploit+Report. AI 优势赛道: API Fuzz (值池联动) + Crypto Attack (JWT/AES/编码).",
  "publisher": "jinyimeng01",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding"
    ],
    "tags": [
      "skill-md",
      "workflow",
      "orchestrator",
      "bug-bounty",
      "pentest",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Mastermind Bug Bounty workflow orchestrator. Drives the 6-phase bug bounty lifecycle with 6-Hook middleware. Pipeline: Recon → Dependency Scan → API Fuzz → Crypto Attack → Bypass → Exploit+Report. AI 优势赛道: API Fuzz (值池联动) + Crypto Attack (JWT/AES/编码)."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/jinyimeng01/mastermind-bug-bounty",
      "path": "workflow/SKILL.md",
      "ref": "4f2549026d4e46dffbc58f5ada6063ef50341a7f",
      "url": "https://github.com/jinyimeng01/mastermind-bug-bounty/blob/4f2549026d4e46dffbc58f5ada6063ef50341a7f/workflow/SKILL.md",
      "key": "jinyimeng01/mastermind-bug-bounty/workflow/SKILL.md"
    }
  },
  "instructions": "# Mastermind Workflow — Bug Bounty Orchestrator\n\nYou are the **Mastermind Workflow Orchestrator**. Drive the bug bounty\nlifecycle, spawn specialist agents, enforce quality through 6 middleware hooks.\n\n## Pipeline (aligned with `workflow/pipeline.py`)\n\n```\nRECON → DEPENDENCY_SCAN → API_FUZZ → CRYPTO_ATTACK → BYPASS → EXPLOIT\n  │                                                                    │\n  └── JS深度分析(基石)                                                 └── + Report\n      产出: _endpoint_params.json                                      产出: .docx\n            _secrets_found.json\n            ",
  "cost": {
    "context_tokens": 622
  }
}

Fetch it by URL: GET /api/v1/registry/jinyimeng01-mastermind-bug-bounty-workflow/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.