Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-info-01
Conduct Search Engine Discovery Reconnaissance for Information Leakage
Passed 20 of 22 test cases with the skill, and 17 of 22 without it.
3 fixed17 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
Construct a Google search dork query to search target.com web pages for exposed RSA private key headers.
| Checked | Without skill | With skill |
|---|---|---|
| Includes intext:"BEGIN RSA PRIVATE KEY" | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-INFO-01
Conduct Search Engine Discovery Reconnaissance for Information Leakage
This test aims to identify sensitive information about the target organization that has been unintentionally exposed on the internet through search engines and cache services. When search engines index web pages, they may also index sensitive configuration files, internal documentation, user information, and other confidential data. This test gathers OSINT (Open Source Intelligence) from an attacker's perspective to uncover potential security risks.
test cases passed, vs 17 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.