Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-info-03
Review Webserver Metafiles for Information Leakage
Passed 9 of 22 test cases with the skill, and 13 of 22 without it.
2 fixed16 passed either way3 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
We want to automate the analysis of `robots.txt` files to parse disallowed entries across multiple targets without writing custom regex. Is there a dedicated Python-based CLI utility designed specifically for inspecting and analyzing robots.txt files?
| Checked | Without skill | With skill |
|---|---|---|
| The response identifies Parsero as a dedicated robots.txt analysis tool. | Missed | Passed |
| The response demonstrates executing the tool command against a target site. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-INFO-03
Review Webserver Metafiles for Information Leakage
Web servers contain various metafiles that can inadvertently expose sensitive information about the application structure, hidden directories, restricted areas, and internal configurations. Files such as robots.txt, sitemap.xml, security.txt, and META tags are often overlooked but can provide attackers with valuable reconnaissance data. This test involves systematically reviewing these metafiles to identify information leakage and potential attack vectors.
robots.txt - Spider/crawler directivessitemap.xml - Site structure mappingsitemap_index.xml - Sitemap index filessecurity.txt - Security policy disclosurehumans.txt - Team/contributor informationcrossdomain.xml - Flash cross-domain policyclientaccesspolicy.xml - Silverlight policy.well-known/ directory contentsads.txt - Authorized digital sellersapp-ads.txt - Mobile app advertisingassetlinks.json - Android app linksapple-app-site-association - iOS app linkstest cases passed, vs 13 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.