hackingyseguridad/ia · .claude/skills/webaudit/SKILL.md
web-pentest skillC
Usar esta habilidad SIEMPRE que el usuario quiera realizar pruebas de penetración, auditoría, análisis automático o explotación de vulnerabilidades sobre un portal web, aplicación web, API REST, servicio HTTP/HTTPS, IP o FQDN con el servicio web activo. Activar cuando se mencionen: auditoría web, SQLi, XSS, LFI, RFI, inyección de comandos, traversal de directorios, CSRF, XXE, SSRF, evasión de WAF, omisión de código 403, cabeceras HTTP inseguras, cifrados TLS débiles, smuggling HTTP, proxy abiert
Latest version
mdr add hackingyseguridad/ia/web-pentest@git:20260619.04045d9Exact content
mdr add hackingyseguridad/ia/web-pentest@sha256:958e52f960c0997bBadge
[](https://markdownregistry.com/a/art_wbgfdr63towhheys)
0 badge views in 30 days
Versions
Audit of the latest version
C 15 of 17 checks passed. Deterministic, no model, same answer every run.
- fail: No link to a raw IP address (matched: http://127.0.0.1)
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (16967 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
Source
GitHub
hackingyseguridad/ia · 2 stars · license NOASSERTION · pushed 2026-09-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_wbgfdr63towhheys GET https://markdownregistry.com/api/v1/resolve?ref=hackingyseguridad/ia/web-pentest GET https://markdownregistry.com/api/v1/blob/958e52f960c0997b01e6f9a58a3b90b3f41d6076920011e472b6912ea791c209