version-tracker-add-target

Adds bug bounty targets with assets and version sources to a tracking database.

1|Updated Aug 11, 2026
One-click install
npx skills add https://github.com/Maybe4a6f7365/agentic-bug-bounty-framework --skill version-tracker-add-target-maybe4a6f7365
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: version-tracker-add-target
Source: https://github.com/Maybe4a6f7365/agentic-bug-bounty-framework/tree/main/version-tracker/skills/version-tracker-add-target
Command: npx skills add https://github.com/Maybe4a6f7365/agentic-bug-bounty-framework --skill version-tracker-add-target-maybe4a6f7365

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually registering new bug bounty targets and their version-checking sources in a tracking database is error-prone and can create duplicate asset rows, causing redundant polling. This Skill creates target, asset, and version_source rows in one step with built-in deduplication. ## Core Features & Use Cases - One-step target registration: Creates the target row, asset rows per attack vector, target_asset junction rows, and version_source entries with the correct source_type, check_method, and config. - Structural deduplication: Reuses existing asset rows matched on (vector_type, canonical_identifier) so the same repo tracked under multiple targets is polled only once. - Custom version sources: Supports inserting custom checkers via SQL, with a template at checkers/custom/_template.py. - Use Case: After importing program scope, you discover a new GitHub org worth monitoring. Run the helper script to register the target, normalize the canonical identifier to owner/repo, and attach version sources in a single pass. ## Quick Start Ask the assistant to add a new bug bounty target to the version tracker by running the add_target.py helper script with the target's GitHub org or Play Store link.

Frequently Asked Questions about version-tracker-add-target

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add a new bug bounty target to version tracking?▼

Run the helper script at scripts/add_target.py interactively, or insert rows directly via SQL. The process creates the target row, asset rows per attack vector, junction rows, and version_source entries in one step.

How does asset deduplication work when tracking the same repo under multiple targets?▼

Before creating an asset, the workflow queries for an existing row matching vector_type and canonical_identifier. If found, it reuses that asset_id and only creates a target_asset junction row, so the repo is polled once.

What format should GitHub identifiers use when adding a target?▼

GitHub canonical identifiers must be normalized to owner/repo without the https://github.com/ prefix. Android package names are case-sensitive and must be entered exactly.

Can I add custom version checkers for unsupported sources?▼

Yes. Insert a version_source row with source_type 'custom' and your check_method name, then place the checker script at checkers/custom/. Copy the template at checkers/custom/_template.py and implement the check(config) function.

Why do version checks fail on Akamai-protected websites?▼

Bot walls block fetch requests from the checking host, so css_selector or api sources fail. Run a pre-flight probe before committing the source, and if blocked, use indirect signals like Play Store, App Store, or RSS feeds instead.