Burp Suite Web Application Testing
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
Security
1 medium severity finding. This skill can be installed but you should review these findings before use.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.90). The skill's core workflow (Phase 1: Intercepting HTTP Traffic; Phase 4: Using Burp Repeater; Phase 5: Running Automated Scans and Required Tools) explicitly directs browsing arbitrary target web application URLs with Burp's embedded browser and reading HTTP history/responses, so untrusted third‑party web content is ingested and used to drive further requests and testing decisions.
- Repository
- Dokhacgiakhoa/antigravity-ide
- Commit
3395991
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.