SkillsAdd

yaklang/hack-skills

business-logic-vuln

>- Entry P1 category router for business logic testing. Use when workflow abuse, race conditions, pricing flaws, or multi-step state attacks matter more than parser-level input injection.

All-time #4324 Trending #7634 First seen Apr 8, 2026
8-week activity · all time api

Installation

$ npx skills add yaklang/hack-skills --skill business-logic-vuln
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

business-pulse Similar name
anthropics/knowledge-work-plugins

Produces a one-page cross-functional business snapshot for SMB owners — cash position (QuickBoo…

1.4K installs
business-model Similar name
phuryn/pm-skills

Generate a Business Model Canvas with all 9 building blocks. Use when creating a business model…

3.2K installs
business-analyst Similar name
aj-geddes/claude-code-bmad-skills

Product discovery and requirements analysis specialist. Conducts stakeholder interviews, market…

2.3K installs
business-analytics-reporter Similar name
ailabs-393/ai-labs-claude-skills

This skill should be used when analyzing business sales and revenue data from CSV files to iden…

2.2K installs
business-growth-skills Similar name
alirezarezvani/claude-skills

Router/index for the 4 business & growth skills bundled in this plugin: customer-success-manage…

2.2K installs
business-health-diagnostic Similar name
deanpeters/product-manager-skills

Diagnose SaaS business health across growth, retention, efficiency, and capital. Use when prepa…

2K installs

Also in this package

Other skills from yaklang/hack-skills · top by installs.

npx skills add yaklang/hack-skills
hack 3.5K android-pentesting-tricks 3.3K sqli-sql-injection 3.3K code-obfuscation-deobfuscation 3.3K api-sec 3.2K xss-cross-site-scripting 3.2K recon-and-methodology 3.2K business-logic-vulnerabilities 3.2K ssrf-server-side-request-forgery 3.1K waf-bypass-techniques 3.1K

Browse all from yaklang/hack-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 2.1K
License LICENSE
Default branch main
Open issues 0
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,236 B
  • docs SUMMARY.md 211 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 3,004 installs

SKILL.md

Business Logic Router

This is the routing entry point for business-logic and state-machine issues.

When to Use

  • The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions
  • The issue is not parser-level; it is about when checks happen and which business conditions are checked
  • You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws

Skill Map

  • [Business Logic Vulnerabilities](../business-logic-vulnerabilities/SKILL.md)

Recommended Flow

  1. First map key business states and one-time actions
  2. Then check for check-then-act windows, sequence dependencies, or missing cross-step authorization
  3. If the chain depends on APIs, uploads, or object permissions, return to the corresponding router skill to complete the path

Related Categories

  • [api-sec](../api-sec/SKILL.md)
  • [auth-sec](../auth-sec/SKILL.md)
  • [file-access-vuln](../file-access-vuln/SKILL.md)