What problem does it solve? When testing web applications, parser-level injection checks miss flaws rooted in business rules and state machines, such as race conditions, price tampering, and workflow bypasses. This Skill acts as the entry router that directs testing toward those logic-level weaknesses. ## Core Features & Use Cases - Category Routing: Serves as the P1 entry point that decides when business logic testing applies instead of input-injection testing. - Skill Map Navigation: Links to the detailed business-logic-vulnerabilities skill and related routers for API, auth, and file access issues. - Structured Test Flow: Guides mapping of business states and one-time actions, then checking for check-then-act windows, sequence dependencies, and missing cross-step authorization. - Use Case: While assessing an e-commerce checkout flow, use this router to determine whether coupon stacking, negative quantities, or race conditions on inventory should be tested before diving into payload-level attacks. ## Quick Start Ask the agent to evaluate the target application's checkout and coupon workflow for business logic vulnerabilities such as race conditions and price tampering.
