Web Vulnerability Analysis Skill

Automated web vulnerability analysis routes tasks through CAI agents and HexStrike to perform reconnaissance, testing, and report generation. It orchestrates end-to-end workflows from parsing to PoC generation.

Playwright browser-based verification validates client-side vulnerabilities like XSS and open redirects. It executes automated checks to confirm exploitability within web applications during dynamic testing.

HexStrike integration provides Docker-based access to Kali security tools for advanced penetration testing. It enables non-browser mode testing to expand vulnerability scanning capabilities across environments.

Docker is required to run HexStrike integration for accessing Kali-based security tools. The environment orchestrates CAI agents through Docker to execute automated penetration testing and SAST verification.

Dynamic verification of SAST findings uses CAI-driven task routing to 11 agents for automated testing. It parses static analysis reports and applies dynamic verification to generate PoC and final reports.

Web vulnerability analysis using CAI agents requires specifying a target and desired verification mode to initiate testing. Limitations depend on browser and non-browser modes available for the specific assessment scope.