Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-busl-04
Test for Process Timing
Passed 17 of 22 test cases with the skill, and 14 of 22 without it.
3 fixed14 passed either way5 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
When evaluating a polling application designed to limit users to one vote per item, what outcome indicates a process timing weakness?
| Checked | Without skill | With skill |
|---|---|---|
| The response specifies receiving multiple HTTP 200 status codes for concurrent vote submissions by a single user. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-BUSL-04
Test for Process Timing
Process timing testing examines whether an application's business logic can be exploited through timing attacks or race conditions. Attackers may exploit timing vulnerabilities to bypass security controls, perform double-spending attacks, or gain unauthorized access. This includes testing for race conditions in financial transactions, time-of-check to time-of-use (TOCTOU) vulnerabilities, and timing-based information leakage.
| Operation | Risk |
|---|---|
| Financial transfers | Double spending |
| Coupon/code redemption | Multiple use |
| Vote/rating systems | Vote manipulation |
| Inventory reservation | Overbooking |
| Account creation | Duplicate accounts |
test cases passed, vs 14 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.