Skills for Real Engineers. Straight from my .agents directory.
39 skills
business-logic-vuln
Agent skill from
Entry P1 category router for business logic testing. Use when workflow abuse, race conditions, pricing flaws, or multi-step state attacks matter more than parser-level input injection.
How to install business-logic-vuln
install business-logic-vuln
# install the hack-skills pack with the skills CLI
npx skills add yaklang/hack-skills# or add only this skill to Claude Code: copy the folder
skills/business-logic-vuln/
# into
~/.claude/skills/business-logic-vuln/ (all projects)
.claude/skills/business-logic-vuln/ (one project)
1# Business Logic Router23This is the routing entry point for business-logic and state-machine issues.45## When to Use67- The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions8- The issue is not parser-level; it is about when checks happen and which business conditions are checked9- You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws1011## Skill Map1213- [Business Logic Vulnerabilities](../business-logic-vulnerabilities/SKILL.md)1415## Recommended Flow16171. First map key business states and one-time actions182. Then check for check-then-act windows, sequence dependencies, or missing cross-step authorization193. If the chain depends on APIs, uploads, or object permissions, return to the corresponding router skill to complete the path2021## Related Categories2223- [api-sec](../api-sec/SKILL.md)24- [auth-sec](../auth-sec/SKILL.md)25- [file-access-vuln](../file-access-vuln/SKILL.md)
Excerpt shown under the repository's MIT license.
More skills in hack-skills
Keep exploring
Similar skill repositories
An agentic skills framework & software development methodology that works.
15 skills
Public repository for Agent Skills
20 skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
CCCU6 skills
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
CCCXGHGM+135 skills
Production-grade engineering skills for AI coding agents.
CCCXCU25 skills