Burp Suite/Web Security Skill
Web application security testing with Burp Suite integration
npx skills add a5c-ai/babysitter --skill burp-websec --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Burp Suite/Web Security Skill ## Overview This skill provides web application security testing capabilities with Burp Suite and OWASP ZAP integration. ## Capabilities - Configure Burp Suite proxy and scanner - Execute Burp extensions and macros - Parse and analyze HTTP traffic - Generate and send crafted requests - Extract and analyze responses - Support authentication handling - Create and run active scan policies - Generate web vulnerability reports ## Target Processes - web-app-vuln-research.js - api-security-research.js - bug-bounty-workflow.js - red-team-operations.js ## Dependencies - Burp Suite (Professional for full features) - OWASP ZAP (alternative) - Burp REST API - Python requests library - mitmproxy (optional) ## Usage Context This skill is essential for: - Web application penetration testing - API security assessment - Bug bounty hunting - Authentication testing - Session management analysis ## Integration Notes - Supports headless operation via REST API - Can replay and modify captured requests - Integrates with CI/CD for automated scanning - Custom scan policies for targeted testing - Report generation in multiple formats
- Overview
- Capabilities
- Target Processes
- Dependencies
- Usage Context
- Integration Notes
What does the Burp Suite/Web Security Skill skill do?
Web application security testing with Burp Suite integration
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill burp-websec --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.