Find security flaws in your live web application.
Tests an authorized live web application for security flaws and produces a report with reproducible findings and remediation advice.
When to use it
Use for authorized black-box or grey-box testing after reconnaissance has established a target list and test credentials or guest access.
Give it an authorized target application; it returns a penetration-test report with evidence, remediation, and untested scope.
What you provide
The authorized application must be live, in scope, and not under a maintenance freeze.
Instructs the agent to use recon first to map the surface before testing the resulting target list.
This skill
web application
Sends authorization probes to the app
Browser storage
Inspects browser storage for secrets