How do I install the Detecting Logic Bypass skill?

Run npx skillmds@latest add tomevault-io/detecting-logic-bypass in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Detecting Logic Bypass safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Detecting Logic Bypass?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Detecting Logic Bypass free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Detecting Logic Bypass?

tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Detecting Logic Bypass by tomevault-io

Name: Detecting Logic Bypass
Author: tomevault-io

Detecting Logic Bypass

Detects logic bypass vulnerabilities including authentication bypass, authorization bypass, and business logic flaws. Use when analyzing authentication mechanisms, access controls, or investigating security control bypasses. Use when this capability is needed.

tomevault-io Updated Sep 17, 2026

File contents

Logic Bypass Detection

Detection Workflow

Identify security controls: Find authentication mechanisms, authorization checks, validation functions, business logic rules
Trace control flow: Use xrefs_to to trace paths, identify bypass opportunities, check for missing checks
Check validation logic: Review validation functions, test bypass scenarios, assess validation completeness
Assess bypass impact: What security control is bypassed? What's the business impact? How severe is the bypass?

Key Patterns

Authentication bypass: weak password checks, session token weaknesses, timing attacks
Authorization bypass: missing permission checks, insecure direct object references, privilege escalation
Input validation bypass: blacklist-based validation, insufficient sanitization, regex bypass
Business logic bypass: race conditions, state manipulation, transaction abuse

Output Format

Report with: id, type, subtype, severity, confidence, location, vulnerability, security control, bypass method, attack scenario, bypass steps, exploitability, impact, mitigation.

Severity Guidelines

CRITICAL: Complete bypass of primary security control
HIGH: Bypass of important security control
MEDIUM: Partial bypass or edge case bypass
LOW: Limited bypass with minor impact

---name: detecting-logic-bypassdescription: Detects logic bypass vulnerabilities including authentication bypass, authorization bypass, and business logic flaws. Use when analyzing authentication mechanisms, access controls, or investigating security control bypasses. Use when this capability is needed.---# Logic Bypass Detection## Detection Workflow1. **Identify security controls**: Find authentication mechanisms, authorization checks, validation functions, business logic rules2. **Trace control flow**: Use `xrefs_to` to trace paths, identify bypass opportunities, check for missing checks3. **Check validation logic**: Review validation functions, test bypass scenarios, assess validation completeness4. **Assess bypass impact**: What security control is bypassed? What's the business impact? How severe is the bypass?## Key Patterns- Authentication bypass: weak password checks, session token weaknesses, timing attacks- Authorization bypass: missing permission checks, insecure direct object references, privilege escalation- Input validation bypass: blacklist-based validation, insufficient sanitization, regex bypass- Business logic bypass: race conditions, state manipulation, transaction abuse## Output FormatReport with: id, type, subtype, severity, confidence, location, vulnerability, security control, bypass method, attack scenario, bypass steps, exploitability, impact, mitigation.## Severity Guidelines- **CRITICAL**: Complete bypass of primary security control- **HIGH**: Bypass of important security control- **MEDIUM**: Partial bypass or edge case bypass- **LOW**: Limited bypass with minor impact## See Also- `patterns.md` - Detailed detection patterns and exploitation scenarios- `examples.md` - Example analysis cases and code samples- `references.md` - CWE references and mitigation strategies---> Converted and distributed by [TomeVault](https://tomevault.io/claim/waiwai24) — claim your Tome and manage your conversions.

Frequently asked questions