offensive-business-logic

90 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By SnailSploit/Claude-Red (GitHub) · coding · 10,590 stars · scanned at commit a8de813

Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations, multi-step process abuse, price/quantity/discount manipulation, currency confusion, coupon stacking, refund/chargeback abuse, race conditions on logic boundaries, parameter tampering for hidden flows, role/tenant boundary violations, time-of-check vs use, anti-automation defeat, fraud-detection evasion, and subscription/quota abuse. Use when scoping an application after surface…

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: app, app$path

The author does not mention this.

Found in 3 places.

Skills/web/offensive-business-logic/SKILL.md, line 39diff <(curl https://app/main.js) <(curl -H "Cookie: ..." https://app/main.js)
Skills/web/offensive-business-logic/SKILL.md, line 45curl https://app/api/openapi.json | jq '.paths | keys'
Skills/web/offensive-business-logic/SKILL.md, line 96code=$(curl -s -o /dev/null -w "%{http_code}" -X $v -H "Authorization: Bearer $T" https://app$path)

Runs commands on your computer

The author does not mention this. Expected for a coding skill.

Found in 2 places.

Skills/web/offensive-business-logic/SKILL.md, line 39diff <(curl https://app/main.js) <(curl -H "Cookie: ..." https://app/main.js)
Skills/web/offensive-business-logic/SKILL.md, line 94for path in $(cat paths.txt); do

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'offensive-business-logic' ] || [ -L ~/.agents/skills/'offensive-business-logic' ]; then echo 'A skill folder named offensive-business-logic already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/SnailSploit/Claude-Red' "$d" && git -C "$d" checkout --quiet 'a8de813edc9f66f60d44cfe42d47750e89d9930b' -- 'Skills/web/offensive-business-logic' && mkdir -p ~/.agents/skills && cp -R "$d"/'Skills/web/offensive-business-logic' ~/.agents/skills/'offensive-business-logic' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'offensive-business-logic' ~/.claude/skills/'offensive-business-logic' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for SnailSploit/Claude-Red shows the score of its lowest-scoring skill.

SkillTrust badge for SnailSploit/Claude-Red

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/SnailSploit/Claude-Red.svg)](https://zalavijaysinh.github.io/skilltrust/repos/SnailSploit/Claude-Red/)

Score history

Date	Version	Score
2026-11-08	`a8de813`	90
2026-11-07	`a8de813`	90