transilienceai/communitytools/web-app-logic
Claude Code and agent skill by transilienceai/communitytools
Trust tier 3
- community
Source check pending
Checking that the SKILL.md file is still in the repository.
Web application logic testing - business logic flaws, race conditions, access control, cache poisoning/deception, and information disclosure.
Install
npx vskill@latest install transilienceai/communitytools/web-app-logicSKILL.md
Web Application Logic
Test for logic flaws and application-specific vulnerabilities that automated scanners miss.
Techniques
| Type | Key Vectors | |
|---|---|---|
| Business Logic | Workflow bypass, price manipulation, feature abuse | |
| Race Conditions | TOCTOU, limit bypass, double-spend, parallel requests | |
| Access Control | IDOR, horizontal/vertical privilege escalation, forced browsing | |
| Cache Poisoning | Unkeyed headers/parameters, fat GET, response splitting | |
| Cache Deception | Path confusion, static extension tricks, normalization | |
| Info Disclosure | Error messages, debug endpoints, source code, metadata |
Workflow
- Map application workflows and business rules
- Identify state-dependent operations and trust boundaries
- Test logic assumptions with edge cases and race conditions
- Verify access control across user roles
- Document impact with PoC demonstrations
Reference
reference/business-logic*.md- Business logic testing techniquesreference/race-conditions*.md- Race condition exploitationreference/access-control*.md- Access control bypass methodsreference/web-cache-poisoning*.md- Cache poisoning techniquesreference/web-cache-deception*.md- Cache deception attacksreference/information-disclosure*.md- Information disclosure testing
Security
- Security scanPassed, 90 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingskills/web-app-logic/SKILL.md
Popularity
- Repository stars
- 413
- Repository forks
- 73
- 7-day trend score
- 30
Stars and forks are for the whole GitHub repository, not this skill alone. Refreshed 20 Jul 2026, 3 months ago.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/transilienceai/communitytools/web-app-logic)