[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6F0C7F6XS00A077ZG7GSZGR":3,"skill-same:01M6F0C7F6XS00A077ZG7GSZGR":84},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":26,"publishedAt":47,"linkOnly":48,"markdownContent":49,"markdownBody":50,"frontMatter":51,"refName":55,"commitSha":56,"skillDirectory":57,"forksCount":58,"repositoryHtmlUrl":59,"repositoryHomepageUrl":60,"ownerHtmlUrl":61,"ownerBlogUrl":6,"ownerDescription":62,"updatedAt":63,"install":64,"resources":77},"01M6F0C7F6XS00A077ZG7GSZGR","web-security-testing",null,"Web application security testing workflow for OWASP Top 10 vulnerabilities including injection, XSS, authentication flaws, and access control issues.","ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fsickn33\u002Fweb-security-testing\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46],"security","Security Testing","web","web security testing","testing","owasp","testing workflow","control","Access Control","Web Application Security Testing","access","xss","injection","issues","authentication","owasp top 10","workflow","vulnerabilities","application security","safe","2026-11-10 10:12:30",false,"---\nname: web-security-testing\ndescription: \"Web application security testing workflow for OWASP Top 10 vulnerabilities including injection, XSS, authentication flaws, and access control issues.\"\nsource: personal\nrisk: safe\ndomain: security\ncategory: granular-workflow-bundle\nversion: 1.0.0\n---\n\n# Web Security Testing Workflow\n\n## Overview\n\nSpecialized workflow for testing web applications against OWASP Top 10 vulnerabilities including injection attacks, XSS, broken authentication, and access control issues.\n\n## When to Use This Workflow\n\nUse this workflow when:\n- Testing web application security\n- Performing OWASP Top 10 assessment\n- Conducting penetration tests\n- Validating security controls\n- Bug bounty hunting\n\n## Workflow Phases\n\n### Phase 1: Reconnaissance\n\n#### Skills to Invoke\n- `scanning-tools` - Security scanning\n- `top-web-vulnerabilities` - OWASP knowledge\n\n#### Actions\n1. Map application surface\n2. Identify technologies\n3. Discover endpoints\n4. Find subdomains\n5. Document findings\n\n#### Copy-Paste Prompts\n```\nUse @scanning-tools to perform web application reconnaissance\n```\n\n### Phase 2: Injection Testing\n\n#### Skills to Invoke\n- `sql-injection-testing` - SQL injection\n- `sqlmap-database-pentesting` - SQLMap\n\n#### Actions\n1. Test SQL injection\n2. Test NoSQL injection\n3. Test command injection\n4. Test LDAP injection\n5. Document vulnerabilities\n\n#### Copy-Paste Prompts\n```\nUse @sql-injection-testing to test for SQL injection\n```\n\n```\nUse @sqlmap-database-pentesting to automate SQL injection testing\n```\n\n### Phase 3: XSS Testing\n\n#### Skills to Invoke\n- `xss-html-injection` - XSS testing\n- `html-injection-testing` - HTML injection\n\n#### Actions\n1. Test reflected XSS\n2. Test stored XSS\n3. Test DOM-based XSS\n4. Test XSS filters\n5. Document findings\n\n#### Copy-Paste Prompts\n```\nUse @xss-html-injection to test for cross-site scripting\n```\n\n### Phase 4: Authentication Testing\n\n#### Skills to Invoke\n- `broken-authentication` - Authentication testing\n\n#### Actions\n1. Test credential stuffing\n2. Test brute force protection\n3. Test session management\n4. Test password policies\n5. Test MFA implementation\n\n#### Copy-Paste Prompts\n```\nUse @broken-authentication to test authentication security\n```\n\n### Phase 5: Access Control Testing\n\n#### Skills to Invoke\n- `idor-testing` - IDOR testing\n- `file-path-traversal` - Path traversal\n\n#### Actions\n1. Test vertical privilege escalation\n2. Test horizontal privilege escalation\n3. Test IDOR vulnerabilities\n4. Test directory traversal\n5. Test unauthorized access\n\n#### Copy-Paste Prompts\n```\nUse @idor-testing to test for insecure direct object references\n```\n\n```\nUse @file-path-traversal to test for path traversal\n```\n\n### Phase 6: Security Headers\n\n#### Skills to Invoke\n- `api-security-best-practices` - Security headers\n\n#### Actions\n1. Check CSP implementation\n2. Verify HSTS configuration\n3. Test X-Frame-Options\n4. Check X-Content-Type-Options\n5. Verify referrer policy\n\n#### Copy-Paste Prompts\n```\nUse @api-security-best-practices to audit security headers\n```\n\n### Phase 7: Reporting\n\n#### Skills to Invoke\n- `reporting-standards` - Security reporting\n\n#### Actions\n1. Document vulnerabilities\n2. Assess risk levels\n3. Provide remediation\n4. Create proof of concept\n5. Generate report\n\n#### Copy-Paste Prompts\n```\nUse @reporting-standards to create security report\n```\n\n## OWASP Top 10 Checklist\n\n- [ ] A01: Broken Access Control\n- [ ] A02: Cryptographic Failures\n- [ ] A03: Injection\n- [ ] A04: Insecure Design\n- [ ] A05: Security Misconfiguration\n- [ ] A06: Vulnerable Components\n- [ ] A07: Authentication Failures\n- [ ] A08: Software\u002FData Integrity\n- [ ] A09: Logging\u002FMonitoring\n- [ ] A10: SSRF\n\n## Quality Gates\n\n- [ ] All OWASP Top 10 tested\n- [ ] Vulnerabilities documented\n- [ ] Proof of concepts captured\n- [ ] Remediation provided\n- [ ] Report generated\n\n## Related Workflow Bundles\n\n- `security-audit` - Security auditing\n- `api-security-testing` - API security\n- `wordpress-security` - WordPress security\n","# Web Security Testing Workflow\n\n## Overview\n\nSpecialized workflow for testing web applications against OWASP Top 10 vulnerabilities including injection attacks, XSS, broken authentication, and access control issues.\n\n## When to Use This Workflow\n\nUse this workflow when:\n- Testing web application security\n- Performing OWASP Top 10 assessment\n- Conducting penetration tests\n- Validating security controls\n- Bug bounty hunting\n\n## Workflow Phases\n\n### Phase 1: Reconnaissance\n\n#### Skills to Invoke\n- `scanning-tools` - Security scanning\n- `top-web-vulnerabilities` - OWASP knowledge\n\n#### Actions\n1. Map application surface\n2. Identify technologies\n3. Discover endpoints\n4. Find subdomains\n5. Document findings\n\n#### Copy-Paste Prompts\n```\nUse @scanning-tools to perform web application reconnaissance\n```\n\n### Phase 2: Injection Testing\n\n#### Skills to Invoke\n- `sql-injection-testing` - SQL injection\n- `sqlmap-database-pentesting` - SQLMap\n\n#### Actions\n1. Test SQL injection\n2. Test NoSQL injection\n3. Test command injection\n4. Test LDAP injection\n5. Document vulnerabilities\n\n#### Copy-Paste Prompts\n```\nUse @sql-injection-testing to test for SQL injection\n```\n\n```\nUse @sqlmap-database-pentesting to automate SQL injection testing\n```\n\n### Phase 3: XSS Testing\n\n#### Skills to Invoke\n- `xss-html-injection` - XSS testing\n- `html-injection-testing` - HTML injection\n\n#### Actions\n1. Test reflected XSS\n2. Test stored XSS\n3. Test DOM-based XSS\n4. Test XSS filters\n5. Document findings\n\n#### Copy-Paste Prompts\n```\nUse @xss-html-injection to test for cross-site scripting\n```\n\n### Phase 4: Authentication Testing\n\n#### Skills to Invoke\n- `broken-authentication` - Authentication testing\n\n#### Actions\n1. Test credential stuffing\n2. Test brute force protection\n3. Test session management\n4. Test password policies\n5. Test MFA implementation\n\n#### Copy-Paste Prompts\n```\nUse @broken-authentication to test authentication security\n```\n\n### Phase 5: Access Control Testing\n\n#### Skills to Invoke\n- `idor-testing` - IDOR testing\n- `file-path-traversal` - Path traversal\n\n#### Actions\n1. Test vertical privilege escalation\n2. Test horizontal privilege escalation\n3. Test IDOR vulnerabilities\n4. Test directory traversal\n5. Test unauthorized access\n\n#### Copy-Paste Prompts\n```\nUse @idor-testing to test for insecure direct object references\n```\n\n```\nUse @file-path-traversal to test for path traversal\n```\n\n### Phase 6: Security Headers\n\n#### Skills to Invoke\n- `api-security-best-practices` - Security headers\n\n#### Actions\n1. Check CSP implementation\n2. Verify HSTS configuration\n3. Test X-Frame-Options\n4. Check X-Content-Type-Options\n5. Verify referrer policy\n\n#### Copy-Paste Prompts\n```\nUse @api-security-best-practices to audit security headers\n```\n\n### Phase 7: Reporting\n\n#### Skills to Invoke\n- `reporting-standards` - Security reporting\n\n#### Actions\n1. Document vulnerabilities\n2. Assess risk levels\n3. Provide remediation\n4. Create proof of concept\n5. Generate report\n\n#### Copy-Paste Prompts\n```\nUse @reporting-standards to create security report\n```\n\n## OWASP Top 10 Checklist\n\n- [ ] A01: Broken Access Control\n- [ ] A02: Cryptographic Failures\n- [ ] A03: Injection\n- [ ] A04: Insecure Design\n- [ ] A05: Security Misconfiguration\n- [ ] A06: Vulnerable Components\n- [ ] A07: Authentication Failures\n- [ ] A08: Software\u002FData Integrity\n- [ ] A09: Logging\u002FMonitoring\n- [ ] A10: SSRF\n\n## Quality Gates\n\n- [ ] All OWASP Top 10 tested\n- [ ] Vulnerabilities documented\n- [ ] Proof of concepts captured\n- [ ] Remediation provided\n- [ ] Report generated\n\n## Related Workflow Bundles\n\n- `security-audit` - Security auditing\n- `api-security-testing` - API security\n- `wordpress-security` - WordPress security\n",{"name":5,"risk":46,"domain":27,"source":52,"version":53,"category":54,"description":7},"personal","1.0.0","granular-workflow-bundle","main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Faiskillstore\u002Fmarketplace\u002Fsickn33\u002Fweb-security-testing",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":8,"skillName":5,"commands":65,"prompt":75,"zipAvailable":76},[66,69,72],{"tool":67,"command":68},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill web-security-testing",{"tool":70,"command":71},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill web-security-testing",{"tool":73,"command":74},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill web-security-testing","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fsickn33\u002Fweb-security-testing\u002FSKILL.md",true,[78],{"path":79,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":82,"sourceHtmlUrl":83},"skill-report.json","REFERENCE","参考文档",11433,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fsickn33\u002Fweb-security-testing\u002Fskill-report.json",[85,95,105,114,120,127],{"skillNo":86,"name":87,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":88,"categories":89,"keywords":91,"publishedAt":47},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[90],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[92,93,94],"model","model hierarchy","model hierarchy skill",{"skillNo":96,"name":97,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":98,"categories":99,"keywords":101,"publishedAt":47},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[100],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[102,103,104],"MCP","zoom","zoom mcp",{"skillNo":106,"name":107,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":108,"categories":109,"keywords":110,"publishedAt":47},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[111,112,113,103],"sdk","zoom apps sdk","apps",{"skillNo":115,"name":116,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":117,"categories":118,"keywords":119,"publishedAt":47},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[116],{"skillNo":121,"name":122,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":123,"categories":124,"keywords":126,"publishedAt":47},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[125],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[122],{"skillNo":128,"name":129,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":130,"categories":131,"keywords":132,"publishedAt":47},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[129]]