← All skills
burpsuite-project-parser
97 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By trailofbits/skills (GitHub) · security · 8,130 stars · scanned at commit e4dd0bb
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 30 places.
Show 17 more
- plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 127
{baseDir}/scripts/burp-search.sh project.burp proxyHistory.request.headers | head -c 50000 - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 138
{baseDir}/scripts/burp-search.sh project.burp proxyHistory.response.headers | \ - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 152
responseHeader='.*regex.*' - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 158
responseHeader='.*(nginx|Apache|Servlet).*' | head -c 50000 - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 163
responseBody='.*regex.*' - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 169
{baseDir}/scripts/burp-search.sh project.burp "responseBody='.*<form.*action.*'" | \ - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 179
auditItems - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 187
proxyHistory - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 195
siteMap - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 209
{baseDir}/scripts/burp-search.sh project.burp proxyHistory | wc -cl - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 241
responseHeader='.*' - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 251
{baseDir}/scripts/burp-search.sh project.burp proxyHistory.response.headers | \ - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 261
{baseDir}/scripts/burp-search.sh project.burp proxyHistory.request.headers | head -c 50000 - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 275
jq -c '.body = (.body[:1000] + "...[TRUNCATED]")' - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 289
{baseDir}/scripts/burp-search.sh project.burp auditItems | jq 'select(.severity == "High")' - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 294
... | jq 'select(.confidence == "Certain" or .confidence == "Firm")' - plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md, line 299
... | jq -r '.url' | sort -u
and 10 more places
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'burpsuite-project-parser' ] || [ -L ~/.agents/skills/'burpsuite-project-parser' ]; then echo 'A skill folder named burpsuite-project-parser already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/trailofbits/skills' "$d" && git -C "$d" checkout --quiet 'e4dd0bb5b15535f7c5a0834187dffba6ac37e4ff' -- 'plugins/burpsuite-project-parser/skills/burpsuite-project-parser' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/burpsuite-project-parser/skills/burpsuite-project-parser' ~/.agents/skills/'burpsuite-project-parser' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'burpsuite-project-parser' ~/.claude/skills/'burpsuite-project-parser' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for trailofbits/skills shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/trailofbits/skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | e4dd0bb | 97 |
| 2026-11-07 | e4dd0bb | 97 |