AgentHubAgentHub

testing-websocket-api-security

SkillSkillsMP

io.github.mukul975/Anthropic-Cybersecurity-Skills/testing-websocket-api-security · vmain

Tests WebSocket API implementations for security vulnerabilities including missing authentication on WebSocket upgrade, Cross-Site WebSocket Hijacking (CSWSH), injection attacks through WebSocket messages, insufficient input validation, denial-of-service via message flooding, and information leakage through WebSocket frames. The tester intercepts WebSocket handshakes and messages using Burp Suite, crafts malicious payloads, and tests for authorization bypass on WebSocket channels. Activates for requests involving WebSocket security testing, WS penetration testing, CSWSH attack, or real-time API security assessment.

概览

testing-websocket-api-security 是一个Agent Skill,收录自 SkillsMP。本页提供 Cursor、Claude Code 等客户端的安装配置片段。

Agent Skill 是带 SKILL.md 的指令包。安装后,AI 会根据 description 在匹配任务时自动加载,无需每次手动粘贴提示词。

安装

选择你的平台查看安装方式

# 通用 CLI(Cursor / Claude Code / Codex 等均支持)
npx skills add mukul975/Anthropic-Cybersecurity-Skills@testing-websocket-api-security

使用方式

安装完成后,在对话中直接描述你的任务(或提及技能名称)。Agent 会先读取 SKILL.md 的 description 判断是否启用,再按其中的步骤执行。可用 /skills(Claude Code)或在设置中查看已加载的 Skills。

相关资源

统一 Manifest

{
  "id": "io.github.mukul975/Anthropic-Cybersecurity-Skills/testing-websocket-api-security",
  "type": "skill",
  "version": "main",
  "displayName": "testing-websocket-api-security",
  "description": "Tests WebSocket API implementations for security vulnerabilities including missing authentication on WebSocket upgrade, Cross-Site WebSocket Hijacking (CSWSH), injection attacks through WebSocket messages, insufficient input validation, denial-of-service via message flooding, and information leakage through WebSocket frames. The tester intercepts WebSocket handshakes and messages using Burp Suite, crafts malicious payloads, and tests for authorization bypass on WebSocket channels. Activates for requests involving WebSocket security testing, WS penetration testing, CSWSH attack, or real-time API security assessment.",
  "author": {
    "name": "mukul975",
    "url": "https://github.com/mukul975"
  },
  "repository": {
    "url": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills",
    "source": "github",
    "subfolder": "skills/testing-websocket-api-security"
  },
  "homepage": "https://skillsmp.com/skills/mukul975-anthropic-cybersecurity-skills-skills-testing-websocket-api-security-skill-md",
  "distribution": {
    "packages": [
      {
        "registryType": "source",
        "identifier": "mukul975/Anthropic-Cybersecurity-Skills@testing-websocket-api-security",
        "version": "main",
        "runtimeHint": "npx skills add"
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "codex",
    "vscode"
  ],
  "keywords": [
    "stars:15069"
  ],
  "provenance": {
    "origin": "skillsmp",
    "originalId": "mukul975-anthropic-cybersecurity-skills-skills-testing-websocket-api-security-skill-md",
    "originalUrl": "https://skillsmp.com/skills/mukul975-anthropic-cybersecurity-skills-skills-testing-websocket-api-security-skill-md",
    "isOfficial": false,
    "status": "active"
  }
}
testing-websocket-api-security — Agent Skill 安装与配置 · AgentHub