Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-cryp-03
Testing for Sensitive Information Sent via Unencrypted Channels
Passed 20 of 22 test cases with the skill, and 18 of 22 without it.
and 1 more in the full report
3 fixed17 passed either way1 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
What CVSS base score and qualitative severity level are assigned when user credentials or session identifiers are transmitted over cleartext HTTP?
| Checked | Without skill | With skill |
|---|---|---|
| States a CVSS base score of 7.5 | Missed | Passed |
| Classifies severity as High | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CRYP-03
Testing for Sensitive Information Sent via Unencrypted Channels
Sensitive data transmitted over unencrypted channels (HTTP) can be intercepted by attackers through man-in-the-middle attacks. This includes credentials, session tokens, personal information, and financial data. All sensitive communications must use encrypted channels (HTTPS) with proper configuration.
#!/bin/bash
TARGET="target.com"
# Check if HTTP is accessible
echo "=== HTTP Access ==="
curl -sI "http://$TARGET" | head -10
test cases passed, vs 18 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.