Map security testing signals to CWE vulnerability references and test strategies.
npx skills add https://github.com/dreadnode/capabilities --skill vuln-kb
Please help me install this Agent Skill. Skill: vuln-kb Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/web-security/skills/vuln-kb Command: npx skills add https://github.com/dreadnode/capabilities --skill vuln-kb
Security testers and penetration testers often waste time manually searching for CWE details, attack playbooks, and detection signatures during web application and API security assessments, leading to inconsistent testing and missed vulnerabilities.
Use the vuln-kb skill to look up the test strategy and detection signals for CWE-89 SQL Injection when you encounter SQL error messages in application responses.
High-intent search queries and answers about installing and using this skill.
Web vulnerability mapping correlates static analysis signals and HTTP traffic patterns, such as dangerouslySetInnerHTML or GraphQL introspection requests, directly to high-priority vulnerability classes and associated CWEs for rapid triage.
CWE references for SSRF detection and CORS misconfigurations provide specific test strategies, detection signals, and reporting requirements to validate access control and injection vulnerabilities during web application assessments.
Taint analysis for XSS vulnerabilities traces user-controlled input through application trust boundaries to identify dangerous sinks, mapping detection patterns like dangerouslySetInnerHTML to CWE-79 test strategies and validation steps.
Yes, API security testing is systematized through codified analysis lenses and full testing checklists that ensure comprehensive attack surface coverage and deliver standardized reporting requirements for vulnerability documentation.
Triage SQL error messages by looking up the associated CWE-89 SQL Injection test strategy, which provides specific detection signals and validation techniques to confirm the vulnerability without leaving your workflow.
Yes, business logic tracing is included as a codified analysis lens to systematically evaluate broken access control vulnerabilities, mapping trust boundaries and application error messages to appropriate detection patterns.
deonmenezesMap architecture, trace data flows, and hunt vulnerability variants in code.
infantesromeroadrianDetect and exploit SQL, NoSQL, OS Command, SSTI, XXE, and LDAP/XPath injection vulnerabilities.
jcastillotxIntercept and analyze HTTP traffic with Burp Suite proxy tools.
summarybotngScan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.
