Route web and API security tasks to testing methodologies and vulnerability categories.
npx skills add https://github.com/yaklang/hack-skills --skill hack
Please help me install this Agent Skill. Skill: hack Source: https://github.com/yaklang/hack-skills/tree/main/skills/hack Command: npx skills add https://github.com/yaklang/hack-skills --skill hack
Helps agents and testers quickly decide which vulnerability classes and testing methodology to apply when faced with a new web or API target, reducing wasted effort and noisy enumeration.
Use the hack skill to analyze this target and produce a prioritized testing plan starting with reconnaissance, auth/IDOR checks, and the most likely injection or business-logic vectors.
High-intent search queries and answers about installing and using this skill.
By mapping observed inputs, outputs, and authentication models to high-probability vulnerability categories like XSS, SQLi, and IDOR, you can plan web security testing. This contextual routing reduces wasted effort and noisy enumeration during assessments.
Prioritizing vulnerability triage involves routing target context to high-probability exploit paths. By analyzing target types and authorization models, you generate a prioritized sequence of checks focusing on the most likely injection or business-logic vectors.
Yes, contextual routing applies to reconnaissance and exploit path planning on REST APIs. It evaluates object IDs and endpoints to produce prioritized testing sequences focusing on specific risks like BOLA/IDOR and file upload handling.
You route a file upload endpoint to vulnerability checks by analyzing the target context to prioritize upload handling checks and downstream template or parsing risks. This identifies the most likely exploit path efficiently.
Yes, structured target context is required for web vulnerability assessment routing. You must provide target type, input and output vectors, and authentication/authorization models to produce prioritized next-step test sequences.
RifteoMap attack surface entry points, trust boundaries, and tech stack components.
lNwNlRoute reconnaissance workflows from scope mapping to relevant security test paths.
hyperlane-xyzAnalyze Solidity contracts for security vulnerabilities using Trail of Bits methodologies.
aivos-xieEnumerate subdomains, probe HTTP services, and scan web applications for vulnerabilities.
