hack

Route web security testing tasks to vulnerability categories by phase.

11|4|Updated Jun 7, 2026
One-click install
npx skills add https://github.com/sayseven7/frameseven --skill hack-sayseven7
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hack
Source: https://github.com/sayseven7/frameseven/tree/main/internal/mcp/skills/hack
Command: npx skills add https://github.com/sayseven7/frameseven --skill hack-sayseven7

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you decide how to test a web target by identifying the right security phase and routing the work to the most relevant vulnerability category before deeper analysis begins.

Core Features & Use Cases

  • Phase-first routing: Distinguishes Recon, Validation, Privilege Escalation, and Chain Building so the next step is grounded in methodology.
  • Vulnerability prioritization: Helps choose between XSS, SQLi, SSRF, XXE, SSTI, IDOR, JWT, auth bypass, business logic, and other common web and API attack paths.
  • Context-aware testing: Uses signals from input locations, output contexts, authentication state, and application behavior to reduce missed edge cases.
  • Use case: Start here when you have a new bug bounty target, a REST API, or a complex login and transaction flow and need a structured testing plan.

Quick Start

Ask the hack skill to inspect the target, determine the testing phase, and route the assessment to the most relevant vulnerability family.

Frequently Asked Questions about hack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is the best way to route a web security assessment for a new bug bounty target?

Web security testing routing applies phase-first analysis to distinguish Recon, Validation, Privilege Escalation, and Chain Building phases, structuring the next testing step before deeper vulnerability analysis begins.

How do I prioritize vulnerability categories like XSS, SQLi, and SSRF during API security testing?

Prioritize vulnerability categories by evaluating context-aware signals from input locations, output contexts, and authentication state to route assessments toward the most relevant attack paths like XSS, SQLi, or SSRF.

Can I use this approach for complex login and transaction flow assessments?

Yes, this routing approach applies to complex login and transaction flows by evaluating authentication state and application behavior to reduce missed edge cases in web application and API assessments.

When do I need structured routing for web application reconnaissance?

Structured routing is needed when identifying the correct security phase and vulnerability category before deep analysis begins, ensuring authorized bug bounty work and recon follow a grounded testing methodology.

What vulnerabilities are supported by context-aware web security routing?

Context-aware web security routing supports structured follow-up checks for XSS, SQLi, SSRF, XXE, SSTI, IDOR, JWT, auth bypass, and business logic vulnerabilities based on application behavior signals.