Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-clnt-10
Testing WebSockets
Passed 20 of 22 test cases with the skill, and 16 of 22 without it.
and 2 more in the full report
5 fixed15 passed either way1 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
When documenting client-side security flaws in WebSocket connection handshakes where the server fails to verify the Origin header, developers often classify this generically under CWE-20. What specific CWE ID precisely categorizes missing Origin validation in WebSockets?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies CWE-1385 as the specific weakness type | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CLNT-10
Testing WebSockets
WebSockets provide full-duplex communication channels over a single TCP connection. Security issues can arise from missing authentication, lack of input validation, cross-site WebSocket hijacking, and insecure data transmission.
// Browser console
// Check for WebSocket connections
console.log("WebSocket instances:", window.WebSocket)
// Monitor WebSocket creation
const originalWS = window.WebSocket
window.WebSocket = function (...args) {
console.log("WebSocket created:", args)
test cases passed, vs 16 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.