Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-conf-03
Test File Extensions Handling for Sensitive Information
Passed 22 of 22 test cases with the skill, and 20 of 22 without it.
2 fixed20 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
Write an Nginx configuration block to block HTTP access to sensitive extension types such as .inc, .sql, .env, and .bak. The operations team suggested returning an empty HTTP 200 payload, but explain or show the proper blocking directive.
| Checked | Without skill | With skill |
|---|---|---|
| Uses location matching with regular expressions for file extensions. | Passed | Passed |
| Includes the 'deny all;' directive inside the location block. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CONF-03
Test File Extensions Handling for Sensitive Information
This test examines how the web server handles different file extensions. Misconfigured servers may expose source code, include files, backup files, or other sensitive content when requested with specific extensions. Attackers exploit these misconfigurations to access database credentials, API keys, and other sensitive information stored in files that should never be served directly.
test cases passed, vs 20 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.