Orchestrate gray-box testing by combining white-box candidate discovery with black-box request validation.
npx skills add https://github.com/Q16G/aster --skill graybox-p0
Please help me install this Agent Skill. Skill: graybox-p0 Source: https://github.com/Q16G/aster/tree/main/skills/common/graybox-p0 Command: npx skills add https://github.com/Q16G/aster --skill graybox-p0
灰盒安全测试场景需要在有源码和/或可访问目标时，快速定位白盒候选点并与真实请求验证串成最小闭环，以避免冗余测试。
Provide the target_path and target_url to initialize the minimal gray-box test loop and begin white-box vs black-box validation.
High-intent search queries and answers about installing and using this skill.
Gray-box testing automation orchestrates white-box candidate discovery with black-box real-request validation into a minimal end-to-end loop. You provide the target path and URL to initialize the workflow and cross-validate both approaches.
Integrating white-box and black-box approaches requires a deterministic workflow that locates candidate points in source code and validates them against live endpoints. This creates a repeatable minimal closed loop for cross-validation between both testing methods.
Gray-box test orchestration adapts to dual scenarios when you have only source code, only a target, or both. It correctly guides the testing path based on available inputs, ensuring the workflow proceeds regardless of missing components.
Setting up a minimal gray-box testing loop uses deterministic Bash tooling with argument handling for target_path and target_url. It requires no external dependencies beyond the allowed tools specified in the skill frontmatter to execute the workflow.
Gray-box test orchestration relies on no external dependencies beyond the allowed tools listed in the skill frontmatter. It specifies a deterministic workflow using Bash capable tooling to handle arguments and execute the validation loop.
Gray-box testing avoids redundant tests by quickly locating white-box candidate points and connecting them with real-request validation. This cross-validation forms a minimal closed loop, streamlining security testing when both source code and endpoints are accessible.
melodic-softwareCreate custom slash commands with argument handling and Bash execution in Claude Code.
wutongciIdentify OWASP Top 10 security vulnerabilities in code and configurations.
josemlopezGenerate security test cases from threat models in Markdown, Jest, Pytest, or Playwright formats.
xalgordDiscover chained vulnerabilities across applications and infrastructure during penetration tests.
