skills.rest
Heyu2002
Heyu2002COMMUNITY
Explore all skills by this author →
GitHub

isolated-web-security-assessment

Analyze HAR files and source bundles to assess isolated web application security.

5|Updated May 15, 2026
Search Tags:#web security#har analysis#isolated assessment#burp export#curl transcripts#probe planning#offline triage
One-click install
npx skills add https://github.com/Heyu2002/Safety-Protection-Agent --skill isolated-web-security-assessment
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: isolated-web-security-assessment
Source: https://github.com/Heyu2002/Safety-Protection-Agent/tree/main/skills/isolated-web-security-assessment
Command: npx skills add https://github.com/Heyu2002/Safety-Protection-Agent --skill isolated-web-security-assessment

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you assess web application security when the target cannot be reached directly, so you can still produce evidence-based findings in isolated, air-gapped, intranet-only, VPN-only, or jump-host-only environments.

Core Features & Use Cases

  • Offline Evidence Analysis: Review HAR files, curl transcripts, Postman or Burp exports, screenshots, logs, and source bundles to identify risks without live access.
  • Guided Internal Testing: Produce low-impact probe packets and execution steps for an internal runner or authorized tester inside the target network.
  • Structured Reporting: Separate confirmed findings from hypotheses, document limitations clearly, and generate remediation guidance in Chinese.
  • Use Case: A security tester receives only a HAR export and a few screenshots from a disconnected intranet app and uses this Skill to map endpoints, inspect headers, assess access control, and draft a retest plan.

Quick Start

Use this Skill to turn the artifacts you have into a scoped isolated web assessment report with clear evidence, risks, and next-step probes.

Frequently Asked Questions about isolated-web-security-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a web security assessment without direct network access to the target?▼

You can assess unreachable web applications by analyzing offline artifacts like HAR files, curl transcripts, and screenshots. This isolated assessment approach maps endpoints and identifies risks using evidence-based triage instead of live probing.

Can I analyze a HAR file to identify web vulnerabilities offline?▼

Yes, you can analyze HAR exports to identify web vulnerabilities offline. By inspecting captured HTTP transactions, headers, and payloads, you can assess access control issues and map endpoints without direct access to the live intranet application.

What is the best way to test an air-gapped or VPN-only intranet application for security risks?▼

The best way to test an air-gapped or VPN-only intranet application is through artifact-driven assessment. You review provided logs, source bundles, and screenshots, then generate low-impact probe packets for an authorized internal runner to execute.

How do I plan low-impact probes for an internal tester in an isolated web assessment?▼

You plan low-impact probes by analyzing offline evidence to formulate specific execution steps. This guided internal testing approach ensures an authorized runner safely verifies hypotheses without disrupting the disconnected environment.

Does this isolated assessment approach support generating remediation reports in Chinese?▼

Yes, this isolated assessment approach supports generating remediation reports in Chinese. It separates confirmed findings from hypotheses, documents limitations clearly, and provides structured remediation guidance based on offline header and bundle analysis.

Related Skills

Explore More Software Engineering Skills→
elementalsoulselementalsouls
3.3k

evidence-hygiene

Enforces redaction and sanitization of sensitive data in bug-bounty evidence submissions.

Community
Intermediate
rocklambrosrocklambros
2

writing-pentest-finding

Generate client-deliverable penetration-test findings with CVSS v3.1 vectors and remediation.

Community
Advanced
robandersonrobanderson

mockoon-cli

Create and test API proxies with full traffic logging via CLI.

Community
Advanced
Namma-FlutterNamma-Flutter
57

owasp-mobile-security-checker

Identify OWASP Mobile Top 10 (2024) vulnerabilities in Flutter apps.

Official
Advanced