Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-clnt-08
Testing for Cross-Site Flashing
Passed 21 of 22 test cases with the skill, and 14 of 22 without it.
and 7 more in the full report
7 fixed14 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
What findings are explicitly listed in the WSTG-CLNT-08 risk assessment summary table along with their severity ratings?
| Checked | Without skill | With skill |
|---|---|---|
| Lists Wildcard crossdomain.xml with Medium severity | Missed | Passed |
| Lists XSF vulnerability with Medium severity | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CLNT-08
Testing for Cross-Site Flashing
Cross-Site Flashing (XSF) vulnerabilities occur in Flash/SWF applications when user input is improperly handled. Although Flash is deprecated, legacy applications may still use it. Similar vulnerabilities can exist in other rich media technologies.
#!/bin/bash
TARGET="target.com"
# Find SWF files
curl -s "https://$TARGET" | grep -oP '[^"]+\.swf'
# Check crossdomain.xml
curl -s "https://$TARGET/crossdomain.xml"
test cases passed, vs 14 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.