Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-sess-06
Testing for Logout Functionality
Passed 22 of 22 test cases with the skill, and 16 of 22 without it.
and 6 more in the full report
6 fixed16 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
Testing shows that logout invalidates the server session, but authenticated pages lack cache control headers, allowing an attacker with physical access to view sensitive data by pressing the browser Back button. According to WSTG-SESS-06 risk scoring, what CVSS score and severity level are assigned to 'Missing cache headers'?
| Checked | Without skill | With skill |
|---|---|---|
| Assign a CVSS score of 4.3. | Missed | Passed |
| Rate severity as Medium. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-SESS-06
Testing for Logout Functionality
Logout functionality must properly terminate user sessions by invalidating session tokens on the server side. Improper logout implementation can allow continued access using old session tokens, session replay attacks, or leave users vulnerable if using shared computers.
#!/bin/bash
TARGET="https://target.com"
# Get authenticated session
session=$(curl -s -c - -X POST "$TARGET/login" \
-d "username=test&password=test" | grep -oP "SESSIONID=\K[^;]+")
echo "Session: $session"
test cases passed, vs 16 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.