[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6QEYZDYGVCN3YHD0XB2B4PY":3,"skill-same:01M6QEYZDYGVCN3YHD0XB2B4PY":147},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":26,"publishedAt":46,"linkOnly":47,"markdownContent":48,"markdownBody":49,"frontMatter":50,"refName":79,"commitSha":80,"skillDirectory":81,"forksCount":82,"repositoryHtmlUrl":83,"repositoryHomepageUrl":6,"ownerHtmlUrl":84,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":85,"install":86,"resources":99},"01M6QEYZDYGVCN3YHD0XB2B4PY","web",null,"Execute web-application assessment from setup and recon through injection, access control, auth\u002Fsession issues, API, and SSRF chains.","Shad0wMazt3r\u002FThe-Scaffolding","Shad0wMazt3r","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F58432267?v=4","01M6QEXEQX19RJZTGPKRKB8BJ7","Pratyaksha Beri","01M6QEXEVWS2VFMQWAFWE9554H",3,"GPL-3.0","https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[5,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45],"sanitizer","review","recon","impact","chain","deep","across","map","scoring","exploitability","broken","access","api","analysis","issues","authentication","assessment","architecture","auth","2026-11-10 10:12:30",false,"---\nname: web\ndescription: Execute web-application assessment from setup and recon through injection, access control, auth\u002Fsession issues, API, and SSRF chains.\ndependencies: [agent-setup, agent-calibration]\nfiles:\n  - 01-prerequisites-and-environment.md\n  - 02-injection.md\n  - 03-broken-access-control.md\n  - 04-authentication-and-session-flaws.md\n  - 05-business-logic-flaws.md\n  - 06-client-side-attacks.md\n  - 07-ssrf-and-internal-exposure.md\n  - 08-insecure-deserialization.md\n  - 09-api-specific-vulnerabilities.md\n  - 10-cross-class-data-chaining-map.md\n  - 11-source-review-fast-path.md\noptional_deep_files:\n  - file: 12-source-review-deep-architecture-and-trust.md\n    load_when: User asks for architecture mapping, trust-boundary analysis, or broad source-review strategy.\n  - file: 13-source-review-deep-chain-playbooks.md\n    load_when: User asks for exploit-chain construction across multiple bug classes.\n  - file: 14-source-review-deep-exploitability-and-interactions.md\n    load_when: User asks for exploitability triage, sanitizer bypass, race conditions, GraphQL, OAuth, or system interaction patterns.\n  - file: 15-source-review-deep-severity-and-reporting.md\n    load_when: User asks for impact scoring, severity amplification, or report narrative quality.\n---\n\nLoad files sequentially on activation: see files list above.\nOnly load the next file when the current file's steps are complete or explicitly requested. Do not preload all files at once.\nLoad `optional_deep_files` only when their `load_when` trigger is present.\n\n\n\n","Load files sequentially on activation: see files list above.\nOnly load the next file when the current file's steps are complete or explicitly requested. Do not preload all files at once.\nLoad `optional_deep_files` only when their `load_when` trigger is present.\n\n\n\n",{"name":5,"files":51,"description":7,"dependencies":63,"optional_deep_files":66},[52,53,54,55,56,57,58,59,60,61,62],"01-prerequisites-and-environment.md","02-injection.md","03-broken-access-control.md","04-authentication-and-session-flaws.md","05-business-logic-flaws.md","06-client-side-attacks.md","07-ssrf-and-internal-exposure.md","08-insecure-deserialization.md","09-api-specific-vulnerabilities.md","10-cross-class-data-chaining-map.md","11-source-review-fast-path.md",[64,65],"agent-setup","agent-calibration",[67,70,73,76],{"file":68,"load_when":69},"12-source-review-deep-architecture-and-trust.md","User asks for architecture mapping, trust-boundary analysis, or broad source-review strategy.",{"file":71,"load_when":72},"13-source-review-deep-chain-playbooks.md","User asks for exploit-chain construction across multiple bug classes.",{"file":74,"load_when":75},"14-source-review-deep-exploitability-and-interactions.md","User asks for exploitability triage, sanitizer bypass, race conditions, GraphQL, OAuth, or system interaction patterns.",{"file":77,"load_when":78},"15-source-review-deep-severity-and-reporting.md","User asks for impact scoring, severity amplification, or report narrative quality.","main","87e12fa8d111f634d33f4cde5e93097153be97be",".agents\u002Fskills\u002Fweb",0,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding","https:\u002F\u002Fgithub.com\u002FShad0wMazt3r","2026-08-21 10:55:44",{"source":8,"skillName":5,"commands":87,"prompt":97,"zipAvailable":98},[88,91,94],{"tool":89,"command":90},"npx","npx skills add Shad0wMazt3r\u002FThe-Scaffolding --skill web",{"tool":92,"command":93},"bunx","bunx skills add Shad0wMazt3r\u002FThe-Scaffolding --skill web",{"tool":95,"command":96},"pnpm","pnpm dlx skills add Shad0wMazt3r\u002FThe-Scaffolding --skill web","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002FSKILL.md",true,[100,105,108,111,114,117,120,123,126,129,132,135,138,141,144],{"path":52,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":103,"sourceHtmlUrl":104},"REFERENCE","参考文档",1119,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F01-prerequisites-and-environment.md",{"path":53,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":106,"sourceHtmlUrl":107},2869,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F02-injection.md",{"path":54,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":109,"sourceHtmlUrl":110},2169,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F03-broken-access-control.md",{"path":55,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":112,"sourceHtmlUrl":113},2285,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F04-authentication-and-session-flaws.md",{"path":56,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":115,"sourceHtmlUrl":116},1098,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F05-business-logic-flaws.md",{"path":57,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":118,"sourceHtmlUrl":119},2909,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F06-client-side-attacks.md",{"path":58,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":121,"sourceHtmlUrl":122},1872,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F07-ssrf-and-internal-exposure.md",{"path":59,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":124,"sourceHtmlUrl":125},1067,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F08-insecure-deserialization.md",{"path":60,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":127,"sourceHtmlUrl":128},3791,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F09-api-specific-vulnerabilities.md",{"path":61,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":130,"sourceHtmlUrl":131},865,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F10-cross-class-data-chaining-map.md",{"path":62,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":133,"sourceHtmlUrl":134},1522,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F11-source-review-fast-path.md",{"path":68,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":136,"sourceHtmlUrl":137},1459,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F12-source-review-deep-architecture-and-trust.md",{"path":71,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":139,"sourceHtmlUrl":140},1936,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F13-source-review-deep-chain-playbooks.md",{"path":74,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":142,"sourceHtmlUrl":143},1375,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F14-source-review-deep-exploitability-and-interactions.md",{"path":77,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":145,"sourceHtmlUrl":146},1140,"https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fweb\u002F15-source-review-deep-severity-and-reporting.md",[148,174,198,227,251,272],{"skillNo":149,"name":150,"nameZh":6,"description":151,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":152,"categories":153,"keywords":155,"publishedAt":46},"01M6QEZ57KRHVQ1ATWFG57Y282","bug-hunt-framework","Security testing workflow assistant for recon, web, network, mobile, pwn, crypto, reverse engineering, and forensics phases.","https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.cursor\u002Fskills\u002Fbug-hunt-framework\u002FSKILL.md",[154],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[156,157,158,159,160,161,162,163,164,5,165,166,167,168,169,170,29,171,172,173],"framework","bug","hunt","bug hunt","bug hunt framework","testing","assistant","security","workflow","forensics","network","mobile","crypto","Security Testing","testing workflow","reverse engineering","reverse","for",{"skillNo":175,"name":176,"nameZh":6,"description":177,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":178,"categories":179,"keywords":181,"publishedAt":46},"01M6QEYVABJX80W6WMSEJ2CHD4","reverse-engineering","Progress binary analysis from sample intake through static, anti-analysis, unpacking, dynamic tracing, VM reverse engineering, and symbolic review.","https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Freverse-engineering\u002FSKILL.md",[180],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[182,171,172,28,183,184,185,186,187,188,189,190,40,191,192,193,194,195,196,197],"engineering","dotnet","vm","intake","disassembly","dynamic-analysis","firmware","deobfuscation","execution","virtual","binary analysis","identification","machine","re","custom","static",{"skillNo":199,"name":29,"nameZh":6,"description":200,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":201,"categories":202,"keywords":209,"publishedAt":46},"01M6QEYJFBE8MPPYSEEYFKFZF7","Use recursive bug-bounty recon to discover, verify, and pivot domains, hosts, IPs, cloud assets, and JS signals into the next testing phase.","https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Frecon\u002FSKILL.md",[203,204],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":205,"categoryName":206,"taxonomyType":207,"taxonomyTypeDesc":208},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[29,161,210,211,212,213,214,215,216,157,217,218,219,220,221,222,223,224,225,226],"orchestration","state","ips","bug-bounty","verify","assets","use","files","next","signals","discover","ip","contract","domains","hosts","transition","phase",{"skillNo":228,"name":229,"nameZh":6,"description":230,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":231,"categories":232,"keywords":234,"publishedAt":46},"01M6QEYDRMEK9G9V5ZDMDY5FTF","pwn","Advance pwn workflows from environment setup into stack, heap, format-string, UAF, integer, TOCTOU, kernel, and shellcode exploitation.","https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fpwn\u002FSKILL.md",[233],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[229,235,236,237,184,188,238,239,240,241,242,243,244,216,245,246,247,248,249,250],"kernel","sandbox","workflows","exploitation","toctou","baseline","stack","format","advance","environment","type","free","attacks","environment setup","heap","race-conditions",{"skillNo":252,"name":166,"nameZh":6,"description":253,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":254,"categories":255,"keywords":257,"publishedAt":46},"01M6QEYA0XQ0FFGA65YH7XY7HP","Assess network assets with non-destructive service mapping, auth posture checks, directory exposure reviews, remote access, and evidence-linked pivoting.","https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fnetwork\u002FSKILL.md",[256],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[166,258,259,45,42,260,261,262,263,38,215,244,264,265,266,267,268,269,270,271],"directory","automation","services","mitm","smb","remote-access","evidence","service","mapping","assess","remote","with","reviews","calibration",{"skillNo":273,"name":167,"nameZh":6,"description":274,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":275,"categories":276,"keywords":279,"publishedAt":46},"01M6QEY3THGTFY6BYTVAWQF2B5","Drive mobile app testing from static extraction through TLS bypass, storage abuse, intent\u002FWebView abuse, runtime hooks, and backend pivoting.","https:\u002F\u002Fgithub.com\u002FShad0wMazt3r\u002FThe-Scaffolding\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fmobile\u002FSKILL.md",[277,278],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[167,161,280,42,281,176,282,283,40,39,284,285,286,287,288,289,247,290,172,197],"android","static-analysis","ssl","tls","certificate-pinning","session","mobile app","hooks","runtime","app","mobile app testing"]