Business Logic Vuln
- 2.3k installs
- 1.5k repo stars
- Updated June 16, 2026
- yaklang/hack-skills
business-logic-vuln is an agent skill that >-.
About
This is the routing entry point for business logic and state machine issues The target involves coupons inventory payment approvals quotas invites trials or state transitions The issue is not parser level it is about when checks happen and which business conditions are checked You suspect race conditions workflow bypass price tampering negative values stacked discounts or multi step flaws Business Logic Vulnerabilities business logic vulnerabilities SKILL md 1 First map key business states and one time actions 2 Then check for check then act windows sequence dependencies or missing cross step authorization 3 If the chain depends on APIs uploads or object permissions return to the corresponding router skill to complete the path api sec api sec SKILL md auth sec auth sec SKILL md file access vuln file access vuln SKILL md
- Entry P1 category router for business logic testing. Use when workflow abuse,
- race conditions, pricing flaws, or multi-step state attacks matter more than
- This is the routing entry point for business-logic and state-machine issues.
- Follow business-logic-vuln SKILL.md steps and documented constraints.
- Follow business-logic-vuln SKILL.md steps and documented constraints.
Business Logic Vuln by the numbers
- 2,339 all-time installs (skills.sh)
- +127 installs in the week ending Aug 5, 2026 (Skillselion tracking)
- Ranked #430 of 16,546 AI & Agent Building skills by installs in the Skillselion catalog
- Security screen: LOW risk (skills.sh audit)
- Data as of Aug 5, 2026 (Skillselion catalog sync)
business-logic-vuln capabilities & compatibility
- Capabilities
- entry p1 category router for business logic test · race conditions, pricing flaws, or multi step st · this is the routing entry point for business log · follow business logic vuln skill.md steps and do
- Use cases
- orchestration
What business-logic-vuln says it does
Entry P1 category router for business logic testing. Use when workflow abuse,
race conditions, pricing flaws, or multi-step state attacks matter more than
This is the routing entry point for business-logic and state-machine issues.
npx skills add https://github.com/yaklang/hack-skills --skill business-logic-vulnAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 2.3k |
|---|---|
| repo stars | ★ 1.5k |
| Security audit | 3 / 3 scanners passed |
| Last updated | June 16, 2026 |
| Repository | yaklang/hack-skills ↗ |
When should an agent use business-logic-vuln and what problem does it solve?
>-
Who is it for?
Developers invoking business-logic-vuln as documented in the skill source.
Skip if: Skip when requirements fall outside business-logic-vuln documented scope.
When should I use this skill?
>-
What you get
Outputs aligned with the business-logic-vuln SKILL.md workflow and stated deliverables.
- business-logic test scenarios
- race-condition repro steps
Files
Business Logic Router
This is the routing entry point for business-logic and state-machine issues.
When to Use
- The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions
- The issue is not parser-level; it is about when checks happen and which business conditions are checked
- You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws
Skill Map
- Business Logic Vulnerabilities
Recommended Flow
1. First map key business states and one-time actions 2. Then check for check-then-act windows, sequence dependencies, or missing cross-step authorization 3. If the chain depends on APIs, uploads, or object permissions, return to the corresponding router skill to complete the path
Related Categories
- api-sec
- auth-sec
- file-access-vuln
Related skills
Setup Matt Pocock SkillsScaffold the per-repo configuration that Matt Pocock’s engineering agent skills rely on so they understand the issue tracker, triage labels, and domain documentation la495k196k
Lark AppsConnect Claude, Cursor or custom agents directly to Lark (Feishu) for messaging, document automation, approval workflows and enterprise data access.402k
CavemanSlash token usage by roughly 75% while keeping every technical detail intact when working with Claude Code, Cursor or similar agents.391k94.7k
Lark Skill MakerQuickly turn any Lark/Feishu OpenAPI call or multi-step workflow into a reusable agent skill with its own SKILL.md.386k16k
Running Claude Code Via Litellm CopilotRun Claude Code at a fraction of the cost by routing requests through LiteLLM to the GitHub Copilot Chat API.270k72
Codex PetGenerate a complete Codex Pet spritesheet and metadata from one reference image without needing an OpenAI key or Codex Pro.246k10How it compares
Use business-logic-vuln for stateful workflow and pricing abuse; use injection-focused skills when the primary risk is unsanitized parser input.
FAQ
What is business-logic-vuln?
>-
When should I use business-logic-vuln?
>-
Is business-logic-vuln safe to install?
Review the Security Audits panel on this page before production use.