Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-inpv-14
Testing for Incubated Vulnerabilities
Passed 17 of 22 test cases with the skill, and 16 of 22 without it.
1 fixed16 passed either way5 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
Which specific OWASP Web Security Testing Guide (WSTG) test category code corresponds directly to Testing for Incubated Vulnerabilities?
| Checked | Without skill | With skill |
|---|---|---|
| References WSTG-INPV-14 | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-INPV-14
Testing for Incubated Vulnerabilities
Incubated vulnerabilities are attacks where the malicious payload is stored initially and executed later in a different context or time. These include stored XSS that triggers on admin pages, time-delayed SQL injection, or payloads that activate when processed by scheduled jobs or different users.
#!/bin/bash
TARGET="https://target.com"
echo "[*] Testing for Incubated Vulnerabilities..."
# Store payloads in various input fields
# Check if they trigger in admin panels, reports, or emails
test cases passed, vs 16 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.