validation

Validate bug bounty findings through a four-layer evidence protocol.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/AshtonVaughan/bountyhound --skill validation-ashtonvaughan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: validation
Source: https://github.com/AshtonVaughan/bountyhound/tree/main/bountyhound/skills/validation
Command: npx skills add https://github.com/AshtonVaughan/bountyhound --skill validation-ashtonvaughan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

4-layer validation protocol for confirming bug bounty findings before surfacing them. Findings that clearly fail are discarded. Findings that appear real but couldn't be fully proven are surfaced to the user with status tags - never silently hidden.

Core Features & Use Cases

  • Layered validation protocol (Layers 0A/0B/1/2/3) to ensure evidence quality.
  • Reproduction and evidence-chain requirements to prevent false positives.
  • Gatekeeping that surfaces only PROVEN findings to users.

Quick Start

Apply the four-layer protocol to a finding: start with Layer 0 checks, then Layer 1 reproduction, Layer 2 evidence chain, and Layer 3 impact to reach a PROVEN determination.

Frequently Asked Questions about validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate bug bounty findings to prevent false positives?▼

Validate bug bounty findings by applying a multi-layer protocol that enforces Layer 0 checks, reproduction steps, evidence chains, and impact assessment before surfacing results. This prevents false positives by requiring documented evidence at each stage.

What is the best way to triage security findings for reproducibility?▼

Triage security findings for reproducibility by applying a four-layer validation protocol that requires Layer 1 reproduction and a documented evidence chain. This ensures only reliably reproduced findings with verified impact are surfaced.

How does gatekeeping work for security triage workflows?▼

Gatekeeping in security triage works by evaluating findings against multi-layer validation criteria. Findings that fail validation are discarded, while unproven findings are surfaced with status tags rather than being silently hidden.

What evidence collection requirements are needed for bug bounty validation?▼

Evidence collection for bug bounty validation requires documenting Layer 0 checks, reproducible evidence, a complete evidence chain, and an impact assessment. These components form the structured evidence needed to meet gating criteria for proven findings.

Can I surface security findings that couldn't be fully proven?▼

Yes, you can surface security findings that appear real but couldn't be fully proven. The validation protocol tags these findings with their status and surfaces them to the user, ensuring they are never silently hidden during the triage process.