Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add transilienceai/communitytools --skill web-app-logicgit clone --depth 1 https://github.com/transilienceai/communitytoolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/transilienceai/communitytools/web-app-logic)<a href="https://agentmods.dev/skills/transilienceai/communitytools/web-app-logic"><img src="https://agentmods.dev/badge/skills/transilienceai/communitytools/web-app-logic.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.00319 |
| Opus 5 | $0.00015 | $0.00160 |
| Sonnet 5 | $0.00006 | $0.00064 |
| Haiku 4.5 | $0.00003 | $0.00032 |
Grade A, and why
web-app-logic scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Web Application Logic
Test for logic flaws and application-specific vulnerabilities that automated scanners miss.
Techniques
| Type | Key Vectors |
|---|---|
| Business Logic | Workflow bypass, price manipulation, feature abuse |
| Race Conditions | TOCTOU, limit bypass, double-spend, parallel requests |
| Access Control | IDOR, horizontal/vertical privilege escalation, forced browsing |
| Cache Poisoning | Unkeyed headers/parameters, fat GET, response splitting |
| Cache Deception | Path confusion, static extension tricks, normalization |
| Info Disclosure | Error messages, debug endpoints, source code, metadata |
Workflow
- Map application workflows and business rules
- Identify state-dependent operations and trust boundaries
- Test logic assumptions with edge cases and race conditions
- Verify access control across user roles
- Document impact with PoC demonstrations
Reference
reference/business-logic*.md- Business logic testing techniquesreference/race-conditions*.md- Race condition exploitationreference/access-control*.md- Access control bypass methodsreference/web-cache-poisoning*.md- Cache poisoning techniquesreference/web-cache-deception*.md- Cache deception attacksreference/information-disclosure*.md- Information disclosure testing
What ships with it
55 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- reference/access-control-resources.md 4.9 KB
- reference/business-logic-resources.md 4.7 KB
- reference/INDEX.md 6.7 KB
- reference/information-disclosure-resources.md 5.5 KB
- reference/race-conditions-resources.md 4.8 KB
- reference/scenarios/access-control/data-leakage-redirect.md 2.5 KB
- reference/scenarios/access-control/header-bypass.md 5.9 KB
- reference/scenarios/access-control/idor-action.md 2.9 KB
- reference/scenarios/access-control/idor-read.md 7.3 KB
- reference/scenarios/access-control/mass-assignment.md 5.7 KB
- reference/scenarios/access-control/method-bypass.md 2.9 KB
- reference/scenarios/access-control/multi-step-bypass.md 2.0 KB
- reference/scenarios/access-control/parameter-based-controls.md 2.8 KB
- reference/scenarios/access-control/referer-bypass.md 1.9 KB
- reference/scenarios/access-control/unprotected-functionality.md 2.3 KB
- reference/scenarios/business-logic/burp-extension-scanner.md 5.2 KB
- reference/scenarios/business-logic/coupon-stacking.md 6.5 KB
- reference/scenarios/business-logic/csrf-and-session-bypass.md 2.9 KB
- reference/scenarios/business-logic/email-domain-bypass.md 3.4 KB
- reference/scenarios/business-logic/gift-card-loop.md 7.9 KB
- reference/scenarios/business-logic/parameter-pollution.md 6.3 KB
- reference/scenarios/business-logic/price-manipulation.md 4.8 KB
- reference/scenarios/business-logic/quantity-manipulation.md 7.2 KB
- reference/scenarios/business-logic/regex-input-validation-bypass.md 2.2 KB
- reference/scenarios/business-logic/workflow-bypass.md 4.1 KB
- reference/scenarios/cache/deception-delimiter.md 2.4 KB
- reference/scenarios/cache/deception-normalization.md 2.5 KB
- reference/scenarios/cache/deception-path-mapping.md 2.6 KB
- reference/scenarios/cache/deception-via-smuggling.md 1.9 KB
- reference/scenarios/cache/poisoning-body-args.md 5.4 KB
- reference/scenarios/cache/poisoning-setnx-race.md 8.2 KB
- reference/scenarios/cache/poisoning-unkeyed-headers.md 6.7 KB
- reference/scenarios/cache/poisoning-unkeyed-params.md 4.8 KB
- reference/scenarios/info-disclosure/backups-and-version-control.md 3.2 KB
- reference/scenarios/info-disclosure/client-side-storage-audit.md 2.8 KB
- reference/scenarios/info-disclosure/debug-pages-and-cms-apis.md 3.3 KB
- reference/scenarios/info-disclosure/error-messages.md 2.9 KB
- reference/scenarios/info-disclosure/http-method-disclosure.md 2.3 KB
- reference/scenarios/info-disclosure/javascript-source-review.md 2.7 KB
- reference/scenarios/info-disclosure/multi-port-and-storage-discovery.md 4.3 KB
- reference/scenarios/info-disclosure/security-headers-audit.md 5.1 KB
- reference/scenarios/race-conditions/advanced-techniques.md 4.2 KB
- reference/scenarios/race-conditions/container-startup-admin-registration.md 3.8 KB
- reference/scenarios/race-conditions/detection-and-baseline.md 6.7 KB
- reference/scenarios/race-conditions/file-upload-race.md 2.8 KB
- reference/scenarios/race-conditions/limit-overrun.md 2.4 KB
- reference/scenarios/race-conditions/multi-endpoint.md 2.6 KB
- reference/scenarios/race-conditions/partial-construction.md 2.6 KB
- reference/scenarios/race-conditions/rate-limit-bypass.md 2.5 KB
- reference/scenarios/race-conditions/single-endpoint-collision.md 2.4 KB
- reference/scenarios/race-conditions/timestamp-collision.md 2.5 KB
- reference/scenarios/race-conditions/toctou-session.md 5.2 KB
- reference/web-app-logic-principles.md 6.9 KB
- reference/web-cache-deception-resources.md 4.0 KB
- reference/web-cache-poisoning-resources.md 4.8 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 37 lines · 29 tokens per session scan A a8226409ec15
web-app-logic is a skill published in the GitHub repository transilienceai/communitytools (511 stars, last pushed 1mo ago), licensed MIT. It adds 29 tokens to every session and 319 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
argus
Argus — the all-seeing scanner suite. Six automated scanners for high-value web + LLM bug classes — CORS misconfiguration (origin reflection / null / credentialed read), CRLF & host-header injection, NoSQL injection (operator auth-bypass / $where blind), JWT attacks (alg:none / RS256→HS256 confusion / secret crack)…
omv-repro
Guides a researcher through local reproduction of a vulnerability finding. Use when the user has an omv-audit result with evidence.reproducer filled but evidence.observedresult still unknown, wants to confirm a finding by running it locally, or invokes /omv-repro. Reads .omv/findings/ .yaml and guides step-by-step…
binary-analysis
Binary analysis and reverse engineering workflow using checksec, strings, binwalk, radare2, ropgadget, and gdb for CTF and vulnerability research.
sast-gap-analyzer
Analyzes validation gaps in data flows. Takes traced flows and identifies where checks are missing, insufficient, or bypassable. The 'interaction reasoning' step — finds bugs that exist in the gaps between individually correct-looking code. MUST run on Opus. Use via /sast command.
sast-hunter
Focused PoC builder for SAST candidates. Receives a SPECIFIC candidate vulnerability that survived adversarial validation. Writes a PoC, compiles, runs with ASan, confirms or rejects. Use via /sast command.
sast-flow-tracer
Traces data flow from entry points to dangerous operations. Cross-file reasoning to determine which entries can reach which dangers, and what validation exists in between. MUST run on Opus for reasoning depth. Use via /sast command.