CtrlK
BlogDocsLog inGet started
Tessl Logo

hunt-websocket

Hunt WebSocket vulnerabilities — Cross-Site WebSocket Hijacking (CSWSH), missing/weak Origin validation on the WS handshake, no per-message authentication, message tampering, socket.io namespace/room authorization bypass, and handshake-layer Upgrade smuggling. Use when target has WebSocket endpoints (ws:// or wss://), socket.io / SignalR / Phoenix Channels, real-time features, chat, live dashboards, notifications, or trading platforms.

79

Quality

100%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

100%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A high-quality, tightly written WebSocket hunting skill: executable commands and a real PoC throughout, an explicit phased workflow with mandatory validation checkpoints and false-positive guards, and a well-organized single-file structure. It avoids explaining concepts Claude already knows and keeps every section actionable.

DimensionReasoningScore

Conciseness

The body is dense and information-rich — concrete grep/curl/wscat commands, packet formats, and PoC HTML with no padding explaining what a WebSocket is or how libraries work; every line earns its place, matching the 'lean and efficient' top anchor.

3 / 3

Actionability

Each phase provides copy-paste-ready, executable artifacts — wscat invocations with headers, curl probes, an attacker-origin HTML PoC, exact socket.io packets ('40/admin,'), and named Burp Pro workflows — satisfying the 'fully executable code/commands; copy-paste ready' anchor.

3 / 3

Workflow Clarity

A clear phased sequence (Phase 1→7) with explicit validation checkpoints in every phase, 'False-positive killers', and a mandatory Validation section with ✅/❌ checklists and out-of-band proof requirements provide the feedback loops the top anchor rewards.

3 / 3

Progressive Disclosure

No bundle files exist (references/scripts/assets absent), so the skill is a single self-contained SKILL.md; per the rubric's simple-skills note, well-organized single-file content with clear sections and no nested references can score 3, and the Crown Jewel / Grounding / Phase / Tools / Chain / Validation sections are clearly navigable.

3 / 3

Total

12

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-structured description that names concrete capabilities, supplies an explicit 'Use when' trigger with natural user-facing keywords, and occupies a distinct WebSocket-security niche. It uses third-person/imperative voice with no first/second person, so no specificity penalty applies.

DimensionReasoningScore

Specificity

Opens with the concrete verb 'Hunt WebSocket vulnerabilities' and enumerates six specific vulnerability classes (CSWSH, missing/weak Origin validation, no per-message authentication, message tampering, namespace/room authorization bypass, handshake-layer Upgrade smuggling), matching the 'lists multiple specific concrete actions' anchor.

3 / 3

Completeness

It explicitly answers both 'what does this do' (hunt six named WS vulnerability classes) and 'when should Claude use it' via an explicit 'Use when target has...' trigger clause, satisfying the top anchor for completeness.

3 / 3

Trigger Term Quality

The 'Use when' clause covers natural user-facing terms — 'WebSocket endpoints (ws:// or wss://)', 'socket.io', 'SignalR', 'Phoenix Channels', 'real-time features', 'chat', 'live dashboards', 'notifications', 'trading platforms' — giving strong coverage of phrasings a user would actually say.

3 / 3

Distinctiveness Conflict Risk

It carves out a clear niche — WebSocket-specific security testing — with distinct triggers (ws://, socket.io, real-time features) unlikely to fire for unrelated skills, matching the 'clear niche with distinct triggers' anchor.

3 / 3

Total

12

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
elementalsouls/Claude-BugHunter
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.