An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend.
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “Authorized Security Review” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 1
- authorized-security-review
Use when the user requests an authorized bug-bounty or HackerOne security assessment, evidence validation, or vulnerability report using existing connected tools. Supports source review and scoped web/API assessment.
Things to ask
- “Review this authorized program using my connected tools.”
- “Validate this finding against the supplied evidence.”
- “Draft a HackerOne report from these verified results.”