duck4nh/antigravity-kit136 installs
web-security-expert
Web application security expert. OWASP Top 10, XSS, SQLi, CSRF, SSRF, authentication bypass, IDOR. Use for web app security testing.
How do I install this agent skill?
npx skills add https://github.com/duck4nh/antigravity-kit --skill web-security-expertIs this agent skill safe to install?
- Gen Agent Trust Hubpass
The skill is a reference guide for web security testing, providing checklists and example payloads for common vulnerabilities like SQL injection and XSS. It contains no executable code or malicious instructions.
- Socketwarn
1 alert: gptSecurity
- Snykpass
Risk: LOW · No issues
- Runlayerwarn
1/1 file flagged
- ZeroLeakspass
Score: 93/100 · 2 sections analyzed
What does this agent skill do?
Web Security Expert
OWASP Top 10 Quick Reference
| Vuln | Test | Payload Example |
|---|---|---|
| SQLi | ', ", 1 OR 1=1 | ' UNION SELECT null,username,password FROM users-- |
| XSS | <script>, event handlers | <img src=x onerror=alert(1)> |
| SSRF | Internal URLs | http://127.0.0.1, http://169.254.169.254 |
| IDOR | Change IDs | /api/user/123 → /api/user/124 |
| LFI | Path traversal | ../../../etc/passwd |
| RCE | Command chars | ; id, ` |
Testing Checklist
Authentication
- Brute force protection
- Password reset flaws
- Session fixation
- JWT vulnerabilities
Authorization
- IDOR on all endpoints
- Privilege escalation
- Missing function level access
Input Validation
- SQLi all parameters
- XSS reflected/stored
- Command injection
- File upload bypass
Quick Payloads
# SQLi
' OR '1'='1
' UNION SELECT null,null,null--
'; WAITFOR DELAY '0:0:5'--
# XSS
<script>alert(document.domain)</script>
<img src=x onerror=alert(1)>
javascript:alert(1)
# SSRF
http://127.0.0.1:80
http://[::]:80
http://169.254.169.254/latest/meta-data/
# LFI
....//....//....//etc/passwd
..%252f..%252f..%252fetc/passwd
Tools
| Purpose | Tool |
|---|---|
| Proxy | Burp Suite, OWASP ZAP |
| SQLi | sqlmap |
| XSS | XSStrike, dalfox |
| Fuzzing | ffuf, wfuzz |
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/duck4nh/antigravity-kit/web-security-expert">View web-security-expert on skillZs</a>