Discord guidelines
Discord guidelines and ToS also must be followed through the bot. The full terms can be found here: https://discordapp.com/guidelines
Selfboting
Selfbot usage or cheats to abuse the bot minigame are certainly not allowed. Mass spam of commands is also highly discouraged.
Misleading usage
Raiding other server then trolling a bunch of hentai contents from Scathach bot that just an idiot things and absolutely prohibited.
Security Research & Responsible Disclosure
If you discover any exploits, vulnerabilities, or critical attack paths that could affect the bot or can lead modifying other users data itself. We strongly encourage you to report them responsibly. We will provide rewards for valid security findings—more than just colored roles or generic 'Bug Hunter' role. Meaningful security research is genuinely valued here.
@sinkaroid is not a security expert, and we welcome researchers of all experience levels. If you have something worth reporting, you're welcome here and there's a seat for you at the table.
Security Research Scope
The following systems and services are considered in scope for security research and responsible disclosure:
Backend Services
Gateway— Discord Gateway infrastructure and related backend services.REST— REST APIs and backend endpoints.Bot— Bot services, command handling, and related backend functionality.Music— Music infrastructure, playback services, and related backend components.
Web Infrastructure
*.scathachbot.xyz— Web applications, APIs, and services hosted and operated directly by Scathach.*.scathach.id— Web applications, APIs, and services hosted and operated directly by Scathach.
Research involving vulnerabilities that can compromise user data, authentication, authorization, service integrity, backend infrastructure, or other security boundaries is welcome.
Out of Scope
The following are out of scope:
-
Serverless applications, functions, workers, or other serverless
infrastructure, even when hosted under
*.scathachbot.xyzor*.scathach.id. - Third-party services, infrastructure, or dependencies that are not directly operated or controlled by Scathach.
- Vulnerabilities that cannot reasonably impact Scathach, its infrastructure, or its users.
If you are unsure whether a target falls within the scope, please contact us before conducting security research against it. Give us a ring anytime [[email protected]] or [[email protected]]