file-access-vuln

Routes file access and upload testing workflows to path traversal or upload vulnerability skills.

6|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/Wyl-cmd/kxns-cli --skill file-access-vuln-wyl-cmd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: file-access-vuln
Source: https://github.com/Wyl-cmd/kxns-cli/tree/main/src/kxns_cli/skills/file-access-vuln
Command: npx skills add https://github.com/Wyl-cmd/kxns-cli --skill file-access-vuln-wyl-cmd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? During penetration testing, file-related attack surfaces span download endpoints, upload flows, preview pipelines, and archive extraction, making it hard to decide whether to pursue path traversal, LFI, or upload validation issues first. This Skill acts as a P1 category router that classifies the entry point and directs testing to the correct specialized workflow. ## Core Features & Use Cases - Entry Point Classification: Identifies whether the target surface is a path parameter, download interface, or upload flow. - Pipeline Stage Analysis: Locates whether the weakness sits in the accept, store, process, or serve stage of file handling. - Skill Routing: Directs testers to the path traversal/LFI skill or the insecure file upload skill based on the observed workflow. - Use Case: While assessing a web application with a document preview feature, use this router to determine whether to test for local file inclusion through path parameters or to probe the upload validation and processing chain. ## Quick Start Ask the agent to analyze the target's file download and upload endpoints and route the testing toward path traversal, LFI, or upload validation weaknesses.

Frequently Asked Questions about file-access-vuln

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test file upload vulnerabilities in a web application?

Start by identifying whether the weakness is in the accept, store, process, or serve stage of the upload pipeline. This router directs you to the upload-focused skill covering validation bypasses, storage paths, processing chains, overwrites, and preview or sharing boundaries.

What is the difference between path traversal and LFI testing?

Path traversal targets file read access through manipulated paths, while LFI focuses on including local files through wrappers and inclusion chains. Both are covered by the linked path traversal and LFI skill, which this router selects when path parameters or download interfaces are involved.

When should I use a category router instead of testing directly?

Use the router when the target exposes multiple file workflows such as uploads, previews, transcoding, extraction, and sharing, and you are unsure which vulnerability class applies. It maps the entry point to the correct specialized skill before deep testing begins.

Does this skill include payload collections for file attacks?

No, small-sample path chains and upload bypass payloads have been merged into the main topic skills rather than kept as a separate payload entry. The router only classifies the scenario and links to the appropriate specialized skill.

What platforms does this file access testing workflow support?

The skill is part of a Kali Linux-oriented penetration testing toolkit, so scanning and testing features depend on Linux tooling. Windows environments only support basic conversation and configuration, with WSL 2 recommended for full functionality.