web-vulnerability-discovery

Name: web-vulnerability-discovery
Availability: InStock
Author: heyu2002

Discover authorized web vulnerabilities and generate Chinese reports with risk ratings.

5|Updated May 15, 2026

Search Tags:#browser automation #vulnerability discovery #web security #api enumeration #risk reporting #authorized testing

Ready to run

npx skills add https://github.com/Heyu2002/Safety-Protection-Agent --skill web-vulnerability-discovery

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web-vulnerability-discovery
Source: https://github.com/Heyu2002/Safety-Protection-Agent/tree/main/skills/web-vulnerability-discovery
Command: npx skills add https://github.com/Heyu2002/Safety-Protection-Agent --skill web-vulnerability-discovery

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you safely discover, validate, and report possible vulnerabilities in authorized web applications without relying on guesswork or destructive testing.

Core Features & Use Cases

Authorized Web Security Review: Examine login pages, APIs, forms, cookies, headers, redirects, and browser-visible behavior for weaknesses.
Evidence-Based Validation: Compare baseline and probe responses to confirm issues such as access control failures, injection signs, XSS, open redirects, weak sessions, CORS misconfigurations, and sensitive data exposure.
Lab and Benchmark Reporting: Use it for owned sites, staging environments, local labs, and benchmark targets where reproducible findings and clear remediation steps are needed.

Quick Start

Use this Skill to assess the provided authorized website, map its pages and APIs, test low-impact probes, and produce an evidence-based vulnerability report in Chinese.

Frequently Asked Questions about web-vulnerability-discovery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I discover web vulnerabilities in an authorized staging environment?▼

To discover web vulnerabilities in authorized staging environments, this Skill performs browser-aware mapping and low-impact probing to validate weaknesses. It examines login pages, APIs, and redirects, comparing baseline and probe responses to confirm security issues.

What is evidence-based validation for web security testing?▼

Evidence-based validation for web security testing confirms issues by comparing baseline and probe responses. This Skill validates access control failures, injection signs, XSS, open redirects, weak sessions, and CORS misconfigurations using captured browser-visible behavior and response data.

Can I enumerate APIs and test for CORS misconfigurations safely?▼

Yes, you can safely enumerate APIs and test for CORS misconfigurations using low-impact probing. This Skill applies authorized testing to browser-accessible targets, mapping APIs and validating configuration weaknesses without relying on destructive testing or guesswork.

How do I generate a vulnerability report with labeled risk ratings in Chinese?▼

To generate a vulnerability report with labeled risk ratings in Chinese, this Skill collects evidence from low-impact probes and maps browser-visible behavior. It produces an evidence-based Chinese report containing reproducible findings and clear remediation steps.

Does this approach work for benchmark cases and local labs?▼

Yes, this approach works for benchmark cases and local labs. The Skill is explicitly designed for owned websites, staging environments, and benchmark targets where safe discovery, validation, and reproducible vulnerability findings are required.

What are the limitations of low-impact probing for vulnerability discovery?▼

The limitation of low-impact probing for vulnerability discovery is that it applies only to explicitly permitted scopes, avoiding destructive testing. It focuses on browser-accessible targets and safe validation, meaning it is not suitable for aggressive penetration testing or unauthorized scopes.