Summary
This is a structured workflow for testing web apps against OWASP Top 10 vulnerabilities, broken into seven phases from reconnaissance through reporting. It chains together specialist skills like sql-injection-testing, xss-html-injection, and idor-testing with copy-paste prompts at each stage. Honestly most useful as a checklist to make sure you're not skipping categories during a pentest or bug bounty session. The phase structure keeps you methodical, which matters when you're context-switching between injection types and access control issues. Assumes you already have the component skills installed and know enough about web security to interpret what Claude finds.
Install to Claude Code
npx -y skills add sickn33/antigravity-awesome-skills --skill web-security-testing --agent claude-codeInstalls into .claude/skills of the current project.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Files
SKILL.md
Select a file.
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
