This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
SkillScore77Maintained
Automatic
◆Security & AppSec pack
Last verified 8/10/2026
What it changes
Passed 17 of 22 test cases with the skill, and 16 of 22 without it.
Without skill73%
With skill77%
Checks it passed that the model alone missed
Identifies Cmd+F as the macOS shortcut for forwarding intercepted requests.
1 fixed16 passed either way5 still failing0 broke
Pass-rate lift
+5 pp
Tokens
+173%
Agent turns
0%
Response time
-11%
Model gemini-3.6-flashMeasured 8/10/2026v117 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
A test case the skill fixed. Same model, same prompt, with and without the skill.
Prompt
I am using Burp Suite on macOS to perform web security testing. I want quick keyboard shortcuts instead of using the mouse menus to forward intercepted requests and to send interesting HTTP requests over to Repeater. What are the default macOS shortcut key combinations for these two actions?
What was checked, without and with the skill
Checked
Without skill
With skill
Identifies Cmd+F as the macOS shortcut for forwarding intercepted requests.
Missed
Passed
Identifies Cmd+R as the macOS shortcut for sending requests to Repeater.
Passed
Passed
case-03 · gemini-3.6-flash · 8/10/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md372 linessingle file
Burp Suite Web Application Testing
Purpose
Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application vulnerabilities through proxy-based testing methodology.
Inputs / Prerequisites
Required Tools
Burp Suite Community or Professional Edition installed
Burp's embedded browser or configured external browser
Target web application URL
Valid credentials for authenticated testing (if applicable)
Environment Setup
Burp Suite launched with temporary or named project
Proxy listener active on 127.0.0.1:8080 (default)
Browser configured to use Burp proxy (or use Burp's browser)
CA certificate installed for HTTPS interception
Editions Comparison
Feature
Community
Professional
Proxy
✓
✓
Repeater
✓
✓
Intruder
Limited
Full
Scanner
✗
✓
Extensions
✓
✓
Outputs / Deliverables
Primary Outputs
Intercepted and modified HTTP requests/responses
Vulnerability scan reports with remediation advice
HTTP history and site map documentation
Proof-of-concept exploits for identified vulnerabilities
Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows.
Analyze codebases and automatically generate architecture diagrams, flowcharts, and org charts. Uses AST parsing to map import dependencies for Python, JS/TS, Go, and Java, outputting Mermaid or SVG files. Triggered when users ask to visualize code architecture, understand dependencies, draw a flowchart, or create a module diagram from source code.