Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-clnt-12
Testing Browser Storage
Passed 19 of 23 test cases with the skill, and 18 of 23 without it.
1 fixed18 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
Show how to set a session cookie securely in a Python Flask response using `response.set_cookie()` so that it is protected against XSS theft, MITM interception, and CSRF attacks.
| Checked | Without skill | With skill |
|---|---|---|
| Sets httponly=True and secure=True in set_cookie. | Passed | Passed |
| Sets samesite='Strict' in set_cookie. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CLNT-12
Testing Browser Storage
Browser storage mechanisms (localStorage, sessionStorage, IndexedDB, cookies) can store sensitive data client-side. Vulnerabilities occur when sensitive information is stored insecurely, accessible to XSS attacks, or persists longer than necessary. Testing ensures proper data protection and lifecycle management.
// Browser console - Enumerate all storage
// Check localStorage
console.log("=== localStorage ===")
for (let i = 0; i < localStorage.length; i++) {
const key = localStorage.key(i)
const value = localStorage.getItem(key)
console.log(`${key}: ${value.substring(0, 100)}...`)
test cases passed, vs 18 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.