Burp Suite/Web Security Skill

SkillSecurity

Web application security testing with Burp Suite integration

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; ahel provides instructions and does not run this skill.

Add ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Then ask your AI: use the Burp Suite/Web Security Skill skill

What this skill tells your AI

The instructions your AI receives, as published by a5c-ai/babysitter in library/specializations/security-research/skills/burp-websec/SKILL.md and read by ahel’s review.

Overview

This skill provides web application security testing capabilities with Burp Suite and OWASP ZAP integration.

Capabilities

Configure Burp Suite proxy and scanner
Execute Burp extensions and macros
Parse and analyze HTTP traffic
Generate and send crafted requests
Extract and analyze responses
Support authentication handling
Create and run active scan policies
Generate web vulnerability reports

Target Processes

web-app-vuln-research.js
api-security-research.js
bug-bounty-workflow.js
red-team-operations.js

Dependencies

Burp Suite (Professional for full features)
OWASP ZAP (alternative)
Burp REST API
Python requests library
mitmproxy (optional)

Usage Context

This skill is essential for:

Web application penetration testing
API security assessment
Bug bounty hunting
Authentication testing
Session management analysis

Integration Notes

Supports headless operation via REST API
Can replay and modify captured requests
Integrates with CI/CD for automated scanning
Custom scan policies for targeted testing
Report generation in multiple formats

Signals

GitHub stars: 2k
Forks: 112
Last commit: Sep 2026

Advanced

Item type: skill
Key: burp-suite-web-security-skill
Source: github.com/a5c-ai/babysitter

github.com/a5c-ai/babysitter