pentest-vuln-verify-test
通过原始 HTTP 请求操作和严格验证自动验证 Web 漏洞（开放重定向、XSS）。
Skill by jd-opensource
Chalk Labs
Need help deploying pentest-vuln-verify-test?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/jd-opensource-pentest-vuln-verify-test
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: testing, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
- Runs as
- Shell scripts
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/pentest-vuln-verify-test
What's inside
- Skill name
pentest-vuln-verify-test- Description
- 通过原始 HTTP 请求操作和严格验证自动验证 Web 漏洞（开放重定向、XSS）。
- License
- Apache-2.0
- Instructions
- 23 lines in SKILL.md · view on GitHub
Before installing
- Ships executable scripts
Agent Skills spec issues
- name: "pentest-vuln-verify-test" does not match folder "pentest-vuln-verify"
Files (5)
- SKILL.md
- tools.md · references/
- workflows.md · references/
- scan_demo.sh
- verify.sh
SKILL.md (first lines)
# 漏洞验证自动化 ## 描述 此技能专注于通过操作原始 HTTP 请求来自动验证 Web 漏洞（特别是开放重定向和 XSS）。它处理会话上下文切换（Cookie 替换）和严格的成功标准验证。 ## 核心能力 - 原始 HTTP 请求解析与重构 - 认证会话操作（Cookie 交换） - 自动 Payload 投递 - 响应模式匹配（Meta Refresh / HTTP 30x） ## 参考工作流 - [验证逻辑与流程](references/workflows.md#verification-logic) - [成功标准定义](references/workflows.md#success-criteria) - [工具使用指南](references/tools.md) ## 工具 - Curl (HTTP 客户端) - Bash (脚本编写) - Grep (响应解析) - Burp Suite (用于生成原始请求)
From jd-opensource/JoySafeter, Apache-2.0.
More from jd-opensource/JoySafeter
- 0.697score
pentest-whitebox-code-review
jd-opensource
Source code security audit using backward taint analysis, slot type classification, render context verification, and 3-phase parallel review producing an…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-recon-attack-surface
jd-opensource
White-box attack surface mapping — correlate external scans, browser exploration, and source code into structured endpoint inventory, role architecture, and…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-secrets-exposure
jd-opensource
Discover hardcoded credentials, leaked API keys, exposed configuration files, sensitive data in artifacts, and information disclosure via error handling.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-supply-chain
jd-opensource
Software supply chain security — dependency confusion, CI/CD pipeline attacks, lockfile integrity, and build artifact verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-mobile-app
jd-opensource
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-api-deep
jd-opensource
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-business-logic
jd-opensource
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-client-advanced
jd-opensource
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-config-hardening
jd-opensource
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-exploit-validation
jd-opensource
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-ai-llm-security
jd-opensource
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
SkillCFreshness: C★ 315Claude Code +9 - 0.696score
planning-with-files
jd-opensource
Implements Manus-style file-based planning for complex tasks.
SkillCFreshness: C★ 315Claude Code +9
Signals
- Stars
- 315
- Forks
- 56
- Open issues
- 17
- Last commit (this folder)
- Feb 11, 2026 (8 months ago)
- Last release
- Jul 2, 2026 (4 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/jd-opensource/JoySafeter
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from jd-opensource
- 0.697score
pentest-config-hardening
jd-opensource
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-business-logic
jd-opensource
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-client-advanced
jd-opensource
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-ai-llm-security
jd-opensource
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-api-deep
jd-opensource
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-exploit-validation
jd-opensource
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict…
SkillCFreshness: C★ 315Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get pentest-vuln-verify-test running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
pentest-vuln-verify-test skill. Agent Mart. https://agentmart.dev/skills/jd-opensource-pentest-vuln-verify-test (last updated 2026-10-24)