Agent skill
webapp
Web application security testing - OWASP Top 10, API security
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/webapp
SKILL.md
Web Application Testing
Run authorized web application security tests:
- OWASP Top 10 vulnerabilities
- SQL injection, XSS, command injection
- Authentication and session testing
- Authorization and access control (IDOR)
- API security testing
- Business logic flaws
Required Context
- Target: URL(s) in scope
- Authorization: LOA, bug bounty program, or own app
- Scope: In-scope/out-of-scope endpoints
- Constraints: Rate limits, testing windows
Tools Used
sqlmap, ffuf, gobuster, nuclei, dalfox, nikto, wpscan, burpsuite, jwt_tool, arjun
Example
/webapp
Target: https://app.example.com
Authorization: Bug bounty program
Focus: Authentication bypass, SQLi
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?