Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-conf-04
Review Old Backup and Unreferenced Files for Sensitive Information
Passed 20 of 22 test cases with the skill, and 16 of 22 without it.
and 4 more in the full report
4 fixed16 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
We found an unauthenticated publicly accessible database dump file named dump.sql on a web server root containing sensitive database tables. What is the standard CVSS v3.1 base score and severity rating for this exposure?
| Checked | Without skill | With skill |
|---|---|---|
| Assigns a CVSS v3.1 base score of 9.8 | Missed | Passed |
| Categorizes the overall severity as Critical | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CONF-04
Review Old Backup and Unreferenced Files for Sensitive Information
Old backup files, unreferenced pages, and forgotten content can expose sensitive information including source code, credentials, and outdated vulnerable functionality. These files often contain debugging information, database credentials, or reveal application logic that aids attackers. This test focuses on discovering such files through inference, brute-forcing, and examining publicly available information.
| Pattern | Description |
|---|---|
| file~ | Emacs backup |
| file.bak | Generic backup |
| file.old | Old version |
| file.orig | Original version |
| file.save | Saved version |
test cases passed, vs 16 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.