Burp MCP Vuln Check
langbyyi/CyberStrikeAI-SRC
Automate low-impact web vulnerability verification through Burp MCP.
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp ...
Install Burp Suite Testing
$ npx skills add aiskillstore/marketplace --skill burp-suite-testing -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install aiskillstore/marketplace burp-suite-testing --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/sickn33/burp-suite-testing .claude/skills/burp-suite-testing && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "burp-suite-testing" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/burp-suite-testing into .claude/skills/burp-suite-testing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "burp-suite-testing", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/burp-suite-testingType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add aiskillstore/marketplace --skill burp-suite-testing -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install aiskillstore/marketplace burp-suite-testing --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/sickn33/burp-suite-testing .agents/skills/burp-suite-testing && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "burp-suite-testing" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/burp-suite-testing into .agents/skills/burp-suite-testing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "burp-suite-testing", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add aiskillstore/marketplace --skill burp-suite-testing -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install aiskillstore/marketplace burp-suite-testing --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/sickn33/burp-suite-testing .cursor/skills/burp-suite-testing && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "burp-suite-testing" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/burp-suite-testing into .cursor/skills/burp-suite-testing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "burp-suite-testing", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/aiskillstore/marketplace.git --path skills/sickn33/burp-suite-testing--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add aiskillstore/marketplace --skill burp-suite-testing -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install aiskillstore/marketplace burp-suite-testing --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/sickn33/burp-suite-testing .gemini/skills/burp-suite-testing && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "burp-suite-testing" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/burp-suite-testing into .gemini/skills/burp-suite-testing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "burp-suite-testing", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install aiskillstore/marketplace burp-suite-testingInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add aiskillstore/marketplace --skill burp-suite-testing -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/sickn33/burp-suite-testing .github/skills/burp-suite-testing && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "burp-suite-testing" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/burp-suite-testing into .github/skills/burp-suite-testing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "burp-suite-testing", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add aiskillstore/marketplace --skill burp-suite-testing -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install aiskillstore/marketplace burp-suite-testing --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/sickn33/burp-suite-testing .opencode/skills/burp-suite-testing && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "burp-suite-testing" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/burp-suite-testing into .opencode/skills/burp-suite-testing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "burp-suite-testing", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
burp-suite-testing- GitHub stars
- 430
- Used in
- 4 other repos
- Token cost
- ~2.7k tokens
- SKILL.md length
- 1,153 words
- Files
- 2
- Skills in repo
- 1,044
- Repo updated
- First seen
- Licence
- None found
At a glance
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp ...
- Works in 6 steps: Intercepting HTTP Traffic → Modifying Requests → Setting Target Scope → …
- Asks to intercept HTTP traffic
- SKILL.md covers Purpose, Inputs / Prerequisites, Outputs / Deliverables and Core Workflow, plus 4 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Burp Suite Testing is an agent skill from aiskillstore/marketplace. This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp ...
Its SKILL.md is about 2.7k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `skill-report.json`).
It sits in Security, covering Penetration testing and Web application vulnerabilities. It works with Burp Suite. The repository describes itself as: Security-audited skills for Claude, Codex & Claude Code. One-click install, quality verified.
When your agent uses it
- Asks to intercept HTTP traffic
- Modify web requests
- Use Burp Suite for testing
- Perform web vulnerability scanning
Example prompts
- “intercept HTTP traffic”
- “modify web requests”
- “use Burp Suite for testing”
- “/burp-suite-testing”
Workflow steps
6 steps, taken from the step headings in SKILL.md.
- Intercepting HTTP Traffic
- Modifying Requests
- Setting Target Scope
- Using Burp Repeater
- Running Automated Scans
- Intruder Attacks
What it can do on your machine
Read from SKILL.md and the folder at commit 755bc35. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are http).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Burp Suite Testing loads about 2.7k tokens when it runs. Until then it costs about 51 tokens; SKILL.md has 1,153 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 1,153 words (~2,710 tokens).
“Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application vulnerabilities through…”
- name
- burp-suite-testing
- metadata.author
- zebbern
- metadata.version
- 1.1
- risk
- unknown
- source
- community
Files
SKILL.md and 1 other file in skills/sickn33/burp-suite-testing of aiskillstore/marketplace.
- SKILL.md
- skill-report.json
Open the folder on GitHubat commit 755bc35
Used in 4 other repositories
We found 19 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 4 other GitHub owners. This page covers the copy in aiskillstore/marketplace, which our catalogue first saw on October 7, 2026.
- sickn33/agentic-awesome-skillsskills/burp-suite-testingplugins/agentic-awesome-skills/skills/burp-suite-testing+3 more
- lingxling/awesome-skills-cnantigravity-awesome-skills/skills/burp-suite-testingantigravity-awesome-skills/plugins/agentic-awesome-skills/skills/burp-suite-testing+3 more
- benjaminasterA/antigravity-awesome-skillsskills/burp-suite-testing
- henryalouf/ruflow.agents/skills/burp-suite-testing.agents/skills/antigravity-awesome-skills/skills/burp-suite-testing+6 more
Compare with similar skills
Burp Suite Testing next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Burp Suite Testing this skillaiskillstore/marketplace | 430 | 4 repos | ~2.7k | Automated safety check: Pass | None | |
| Burp MCP Vuln Checklangbyyi/CyberStrikeAI-SRC | 135 | — | ~3.1k | Automated safety check: Pass | Apache-2.0 | |
| Idor Testingzebbern/claude-code-guide | 4.7k | 8 repos | ~3.1k | Automated safety check: Pass | MIT | |
| Exploiting SQL Injection With Sqlmapmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.3k | Automated safety check: Pass | Apache-2.0 | |
| Offensive API SecuritySnailSploit/Claude-Red | 7.4k | — | ~5k | Automated safety check: Pass | MIT | |
| Burp Suite Project Parsertrailofbits/skills | 7.4k | 3 repos | ~4.2k | Automated safety check: Notes | CC-BY-SA-4.0 |
Similar skills
Idor Testing
zebbern/claude-code-guide
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references,"…
Exploiting SQL Injection With Sqlmap
mukul975/Anthropic-Cybersecurity-Skills
Detecting and exploiting SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.
Offensive API Security
SnailSploit/Claude-Red
Comprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces.
- Official
Burp Suite Project Parser
trailofbits/skills
Searches and extracts data from Burp Suite project files on the command line: regex searches over responses, audit findings, proxy history and site map data.
Code Audit
3stoneBrother/code-audit
Professional code security audit skill covering 55+ vulnerability types.
More from aiskillstore/marketplace
All 1,044 skills in this repoCode Stats
aiskillstore/marketplace
Analyze codebase with tokei (fast line counts by language) and difft (semantic AST-aware diffs).
Data Processing
aiskillstore/marketplace
Process JSON with jq and YAML/TOML with yq. An agent skill from aiskillstore/marketplace.
Doc Scanner
aiskillstore/marketplace
Scans for project documentation files (AGENTS.md, CLAUDE.md, GEMINI.md, COPILOT.md, CURSOR.md, WARP.md, and 15+ other formats) and synthesizes guidance.
File Search
aiskillstore/marketplace
Modern file and content search using fd, ripgrep (rg), and fzf.
Find Replace
aiskillstore/marketplace
Modern find-and-replace using sd (simpler than sed) and batch replacement patterns.
Project Planner
aiskillstore/marketplace
Detects stale project plans and suggests session commands. An agent skill from aiskillstore/marketplace.
Related
Works with
Categories
Questions about Burp Suite Testing
What does Burp Suite Testing do?
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp ... Burp Suite Testing is an agent skill from aiskillstore/marketplace. This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp ...
When should I use Burp Suite Testing?
Burp Suite Testing fits situations like: asks to intercept HTTP traffic; modify web requests; use Burp Suite for testing; perform web vulnerability scanning.
How do I install Burp Suite Testing in Claude Code?
Run `npx skills add aiskillstore/marketplace --skill burp-suite-testing -a claude-code`. Or copy the skill folder (skills/sickn33/burp-suite-testing in aiskillstore/marketplace) into .claude/skills/burp-suite-testing in your project. Claude Code loads it when a task matches its description.
How do I install Burp Suite Testing in Codex?
Run `npx skills add aiskillstore/marketplace --skill burp-suite-testing -a codex`. Or copy the skill folder (skills/sickn33/burp-suite-testing in aiskillstore/marketplace) into .agents/skills/burp-suite-testing in your project. Codex loads it when a task matches its description.
Can I use Burp Suite Testing in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add aiskillstore/marketplace --skill burp-suite-testing -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/burp-suite-testing, .gemini/skills/burp-suite-testing, .github/skills/burp-suite-testing and .opencode/skills/burp-suite-testing in your project.
What does Burp Suite Testing need to run?
SKILL.md names no scripts, command-line tools or credentials: Burp Suite Testing is instructions for the agent only.
Does Burp Suite Testing access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Burp Suite Testing safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Burp Suite Testing use?
No licence was found for Burp Suite Testing or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does Burp Suite Testing use?
About 2.7k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Burp Suite Testing?
Skills that share tags, products or a category with Burp Suite Testing: Burp MCP Vuln Check (langbyyi/CyberStrikeAI-SRC, 135 stars), Idor Testing (zebbern/claude-code-guide, 4.7k stars), Exploiting SQL Injection With Sqlmap (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Offensive API Security (SnailSploit/Claude-Red, 7.4k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Burp Suite Testing?
aiskillstore (a GitHub organization) maintains it in aiskillstore/marketplace, which has 430 GitHub stars. The repository holds 1,044 skills in this directory. The repository was last updated on October 9, 2026.
Source: aiskillstore/marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.