Automate xray scans to identify security weaknesses in web applications.
npx skills add https://github.com/wgpsec/AboutSecurity --skill xray-scan
Please help me install this Agent Skill. Skill: xray-scan Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/xray-scan Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill xray-scan
Automate web vulnerability scanning to reduce manual effort, increase coverage, and lower false positives in Web security assessments.
对目标 URL 进行一次主动扫描并生成 HTML 报告。
High-intent search queries and answers about installing and using this skill.
To automate web vulnerability scanning for a single URL, you can use xray to perform an active scan. This mode directly tests the target and generates security reports to identify weaknesses.
Yes, you can conduct passive proxy scanning for web security testing. This mode monitors proxy traffic passively to identify security weaknesses without actively sending payloads to the target.
Automated security testing can detect vulnerabilities like XSS, SQLi, command-injection, SSRF, and XXE. It uses a flexible plugin set to provide comprehensive detection across different testing workflows.
The best way to generate vulnerability reports in JSON or HTML is by configuring the output format in xray. These reports can then be integrated directly into your automation pipelines.
Crawler-based discovery works for full website security assessments by automatically mapping out pages from a starting point. This method ensures comprehensive coverage when identifying security weaknesses across the site.
AeonDaveScan web applications and networks for known vulnerabilities using nuclei templates.
mejangoParse SARIF 2.1.0 files to extract and deduplicate findings.
alexfazioIntercept and inspect Claude Code API traffic using mitmproxy.
CENKSSSValidate SAST and DAST vulnerability exploitability through a 4-phase pipeline.
