⟡ scopeinit

A browser extension that parses bug bounty program policies from HackerOne + Bugcrowd to initialize Caido projects and generate Markdown scope briefings.

---

Features

1. Context Menu Actions

Right-click anywhere on an program policy page:

scopeinit ──┬── push to caido           (Initialize Caido project with scope)
            ├── export markdown         (Download <program>-scope.md briefing)
            └── full (caido & markdown) (Perform both)

2. Push to Caido

Automatically initializes a new project in Caido and populates in-scope allowlist and out-of-scope denylist rules.

3. Markdown Export

Export a concise <program>-scope.md file for agents.

(Preview):

Rate-limiting: 1 requests/second
Identifier: x-bug-bounty: username

In Scope:
- example.com
- *.example.com

In Scope Apps:
- https://apps.apple.com/us/app/example/id123456789
- https://play.google.com/store/apps/details?id=com.example.app
- https://chromewebstore.google.com/detail/example/abcdefghijklmnopabcdefghijklmnop

Out of Scope:
- xyz.example.com

4. Multi-Browser Support

Built for Chromium and Firefox.

---

Installation

Chromium

1. Save dist/chrome/
2. Navigate to chrome://extensions
3. Enable Developer mode (top right)
4. Click Load unpacked and select the dist/chrome/ directory

Firefox

Permanent Install (Developer Edition / Nightly / ESR / LibreWolf / Zen)

1. Save dist/firefox/scopeinit.xpi
2. Set xpinstall.signatures.required to false in about:config
3. Navigate to about:addons
4. Click the gear icon (⚙️) → Install Add-on From File...
5. Select dist/firefox/scopeinit.xpi

Temporary Install (Standard Firefox)

1. Save dist/firefox/scopeinit.xpi
2. Navigate to about:debugging#/runtime/this-firefox
3. Click Load Temporary Add-on...
4. Select dist/firefox/scopeinit.xpi

---

Configuration

Open the extension popup to configure:

• Caido Port: Local instance port (e.g. 8080).
• Caido PAT: Personal Access Token generated under https://dashboard.caido.io → Developer → Create Token.
• Save As Prompt: Optional toggle to prompt for download location when exporting Markdown.

---

Development

Requires Bun.

bun install      # Install dependencies
bun run build    # Build bundles for Firefox and Chrome into dist/
bun test         # Run unit tests
bun run check    # Run TypeScript type check

---

License

MIT