Detect and triage notification abuse across email and SMS endpoints.
npx skills add https://github.com/Q16G/aster --skill notification-abuse
Please help me install this Agent Skill. Skill: notification-abuse Source: https://github.com/Q16G/aster/tree/main/skills/pentest/notification-abuse Command: npx skills add https://github.com/Q16G/aster --skill notification-abuse
This skill identifies and triages abuse attempts targeting notification channels (email, SMS, OTP) by routing to focused sub-skills and enforcing safe testing boundaries, reducing risk and speeding remediation.
Ask to start a notification abuse assessment and it will load the appropriate sub-skills on demand.
High-intent search queries and answers about installing and using this skill.
To detect notification abuse across email and SMS endpoints, this skill identifies and triages abuse attempts by routing to focused sub-skills for single-target bursts, cooldown windows, and rate limits. It enforces safe testing boundaries and produces structured evidence logs for remediation.
Notification abuse testing identifies and triages malicious bursts targeting email, SMS, or OTP channels. You need to run it when targets expose notification endpoints, applying multi-dimensional rate limits and human-verification checks to prevent abuse and guide remediation.
To test rate limits and cooldown windows for OTP endpoints, the skill loads on-demand sub-skills to detect single-target bursts and multi-dimensional rate limits. It aggregates timing signals and outcomes to produce traceable evidence for remediation.
You cannot run notification abuse detection in unauthorized environments because the skill restricts actions to authorized environments only. It enforces safe testing boundaries and preconditions to ensure tests are conducted in controlled settings.
To prevent context bloat when scanning multiple notification channels, the skill uses on-demand routing to load only the necessary sub-skills based on target, scene, and action dimensions. This focused approach avoids loading irrelevant processing modules.
Q16GDetect and validate external XML entity vulnerabilities in authorized targets.
openeuler-mirrorAnalyze iBMC out-of-band logs to diagnose server boot failures.
HankanmanSeparate cooldown tracking from preference enable/disable state to prevent rate-limiting bypass.
Kisilev13Identify and exploit GraphQL vulnerabilities like IDOR, SSRF, and rate-limit bypass.
