Skill profile

web-pentest

Perform black-box / grey-box web application penetration testing on an authorized target : auth bypass.

What this skill does for you

Perform black-box / grey-box web application penetration testing on an authorized target : auth bypass, IDOR, session handling, business-logic flaws, parameter tampering, Burp Suite / OWASP ZAP workflows. Use when the user mentions 'web pentest,' 'web application penetration test,' 'pentesting,' 'bug bounty,' 'Burp Suite,' 'ZAP,' 'OWASP testing,' 'authentication testing,' 'session testing,' 'authorization testing,' 'business logic testing,' 'web vulnerability testing,' or has explicit authorization to test a live web application.

Quoted from the skill description in the pinned source

Who made it

Publisherbriiirussell

Repositorycybersecurity-skills

Installs376as of Sep 27, 2026

Use it with Edge

Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the web-pentest skill from briiirussell/cybersecurity-skills.

Paste it into Claude, ChatGPT, Codex or Cursor.

Or read the skill source first.

Security evidence

Security state at 2026-09-30: reviewed. State definitions. This records static evidence for this revision; live load eligibility is checked again.

3 static scans, 0 counted findings. The listed scanners recorded the results shown for this package revision.

Scanner	Date	Result
Edge static checks	2026-09-27	Pass
Cisco skill-scanner	2026-09-27	Pass
Semgrep Edge rules	2026-09-27	Pass

Static scans check the code, not how well the skill works.

Scanner scope, raw findings and mirrored provider records

Edge static checks (Edge-run): edge-static/1.0.1. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: c9ade0349f8ecd5c9c68a82a05d2b6012c5fa1d7. Raw findings: 1. Counted findings: .

Cisco skill-scanner (Edge-run): cisco-skill-scanner/2.1.0. Scope: Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis. Revision: c9ade0349f8ecd5c9c68a82a05d2b6012c5fa1d7. Raw findings: 1. Counted findings: .

Semgrep Edge rules (Edge-run): semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1. Scope: Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded. Revision: c9ade0349f8ecd5c9c68a82a05d2b6012c5fa1d7. Raw findings: . Counted findings: .

Source and licence

Repository: https://github.com/briiirussell/cybersecurity-skills
Pinned skill file: View source at revision
Revision: c9ade0349f8ecd5c9c68a82a05d2b6012c5fa1d7
Package hash: sha256:c18ce1af9f1be4c57f6fd60534889aa62d47db65f5497a9000834fc9c23496d4
Licence: MIT