Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-busl-07
Test Defenses Against Application Misuse
Passed 21 of 23 test cases with the skill, and 20 of 23 without it.
2 fixed19 passed either way1 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
An API exposing catalog data lacks any bot mitigation or automated client detection mechanisms. What CVSS base score does WSTG-BUSL-07 assign to missing bot detection?
| Checked | Without skill | With skill |
|---|---|---|
| Assigns a CVSS score of 5.3 to absent bot detection. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-BUSL-07
Test Defenses Against Application Misuse
Application misuse defense testing examines whether an application has adequate controls to detect and prevent abuse patterns. This includes testing for automated attack detection, unusual behavior monitoring, and defensive measures against brute force, scraping, credential stuffing, and other abuse scenarios. Effective defenses should identify malicious activity patterns and respond appropriately.
| Scenario | Defense Expected |
|---|---|
| Brute force login | Account lockout, rate limiting |
| Credential stuffing | IP blocking, CAPTCHA |
| Web scraping | Rate limiting, bot detection |
| Price scraping | CAPTCHA, behavior analysis |
| Enumeration attacks | Generic responses, rate limiting |
test cases passed, vs 20 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.