How do I install the Web App Logic skill?

Run npx skillmds add transilienceai/web-app-logic in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Web App Logic skill do?

Web application logic testing - business logic flaws, race conditions, access control, cache poisoning/deception, and information disclosure. It is listed under Coding & Dev Tools on SkillMD.

Is Web App Logic safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Web App Logic?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Web App Logic free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Web App Logic?

transilienceai (@transilienceai) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Web App Logic by transilienceai — Agent Skill

Name: Web App Logic
Rating: 4.5 (4 reviews)
Author: transilienceai

File contents

Web Application Logic

Test for logic flaws and application-specific vulnerabilities that automated scanners miss.

Techniques

Type	Key Vectors
Business Logic	Workflow bypass, price manipulation, feature abuse
Race Conditions	TOCTOU, limit bypass, double-spend, parallel requests
Access Control	IDOR, horizontal/vertical privilege escalation, forced browsing
Cache Poisoning	Unkeyed headers/parameters, fat GET, response splitting
Cache Deception	Path confusion, static extension tricks, normalization
Info Disclosure	Error messages, debug endpoints, source code, metadata

Workflow

Map application workflows and business rules
Identify state-dependent operations and trust boundaries
Test logic assumptions with edge cases and race conditions
Verify access control across user roles
Document impact with PoC demonstrations

Reference

reference/business-logic*.md - Business logic testing techniques
reference/race-conditions*.md - Race condition exploitation
reference/access-control*.md - Access control bypass methods
reference/web-cache-poisoning*.md - Cache poisoning techniques
reference/web-cache-deception*.md - Cache deception attacks
reference/information-disclosure*.md - Information disclosure testing

Frequently asked questions