Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-sess-05
Testing for Cross Site Request Forgery (CSRF)
Passed 20 of 22 test cases with the skill, and 19 of 22 without it.
and 1 more in the full report
2 fixed18 passed either way1 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
An assessment reveals that an application's sensitive data modification POST endpoints omit anti-CSRF protection entirely. What CVSS score and severity level are assigned to complete lack of CSRF protection?
| Checked | Without skill | With skill |
|---|---|---|
| Assigns a CVSS score of 8.8. | Missed | Passed |
| Classifies the severity as High. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-SESS-05
Testing for Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) forces authenticated users to execute unwanted actions on a web application. Attackers craft malicious requests that are automatically sent by the victim's browser with their session credentials, allowing unauthorized actions like password changes, fund transfers, or data modifications.
# Find endpoints that modify data
# Look for: POST, PUT, DELETE, PATCH requests
# Examples:
# - Password change
# - Email update
# - Fund transfer
# - Settings modification
# - Account deletion
test cases passed, vs 19 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.