chore(playbooks): remove trailing blank lines

skills/pentest/playbooks/anti-automation.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-799 (Improper Control of Interaction Frequency), CWE-307 (Improper Restriction of Excessive Authentication Attempts)
 
 Broken anti-automation occurs when the application lacks effective defenses against automated, scripted, or high-frequency interactions. Attackers exploit missing CAPTCHA, absent rate limiting, predictable timing windows, or weak lockout policies to perform brute-force, credential stuffing, or manipulation attacks at scale.
-
 ---
 
 ## Types
@@ -198,4 +197,3 @@ done
 | **Bypassing CAPTCHA at scale (>100 requests)** | Operational disruption |
 
 ---
-

skills/pentest/playbooks/cryptographic-issues.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-327 (Use of a Broken or Risky Cryptographic Algorithm), CWE-328 (Reversible One-Way Hash), CWE-311 (Missing Encryption of Sensitive Data)
 
 Cryptographic issues encompass weak or missing cryptography: unsalted/weak password hashing, predictable pseudorandom number generation, hardcoded keys, insufficient entropy, reversible obfuscation, and forged tokens/credentials.
-
 ---
 
 ## Types
@@ -192,4 +191,3 @@ echo "Token: $TOKEN"
 | **Weakening security controls "to prove a point"** | System integrity violation |
 
 ---
-

skills/pentest/playbooks/csrf.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-352 (Cross-Site Request Forgery)
 
 CSRF occurs when an application allows an attacker to trick a victim's browser into making unintended requests to an authenticated application. If the application relies solely on cookies (or other browser-automated credentials) for authentication and has no anti-CSRF controls, any external site can forge state-changing requests on behalf of authenticated users.
-
 ---
 
 ## Types
@@ -233,4 +232,3 @@ curl -X PUT "https://target.com/api/Users/1" \
 | **Using CSRF for privilege escalation beyond proof** | Unauthorized access / data modification |
 
 ---
-

skills/pentest/playbooks/input-validation.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-20 (Improper Input Validation), CWE-1287 (Improper Validation of Specified Type of Input)
 
 Improper input validation encompasses a wide range of flaws where the application fails to validate user-supplied input for correctness, type, range, format, or boundary limits. This includes file upload flaws, boundary value issues, missing encoding validation, and type coercion bugs.
-
 ---
 
 ## Types
@@ -188,4 +187,3 @@ curl -X POST "https://target.com/api/files/upload" \
 | **Canonicalize filenames** | Resolve `..`, null bytes, and alternate encodings before validation |
 
 ---
-

skills/pentest/playbooks/observability-failures.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information)
 
 Observability failures occur when an application leaks sensitive information through its monitoring, logging, or metrics infrastructure. Attackers can exploit exposed endpoints to learn about internal architecture, discovered credentials, user activity patterns, and system configuration.
-
 ---
 
 ## Types
@@ -155,4 +154,3 @@ curl -s "https://target.com/api/Products/invalid" 2>&1 | grep -oE "(Error:|at |S
 | **SIEM integration** | Forward security-relevant events to SIEM with alerting on suspicious patterns |
 
 ---
-

skills/pentest/playbooks/redirects-unvalidated.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-601 (URL Redirection to Untrusted Site)
 
 Unvalidated redirect (open redirect) occurs when an application accepts user-controlled input that specifies a redirect destination, without validating that the destination is safe. Attackers can use this to phish users, bypass access controls, or trick users into visiting malicious sites.
-
 ---
 
 ## Types
@@ -148,4 +147,3 @@ curl -v "https://target.com/login?redirect=https://target.com.evil.com"
 | **Canonicalize before check** | Normalize URLs before comparing to allowlist |
 
 ---
-

skills/pentest/playbooks/security-misconfiguration.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-16 (Configuration)
 
 Security misconfiguration covers a wide range of flaws arising from improper system, application, or framework configuration. This includes missing security headers, debug/error exposure, deprecated endpoints left active, default configurations not hardened, unnecessary features enabled, and overly permissive cross-origin settings.
-
 ---
 
 ## Types
@@ -176,4 +175,3 @@ curl -s "https://target.com/ftp/" | grep -oE 'href="[^"]+"' | head -10
 | **Regular configuration audits** | Automate security header and endpoint scanning in CI/CD |
 
 ---
-

skills/pentest/playbooks/security-through-obscurity.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-656 (Reliance on Security Through Obscurity)
 
 Security through obscurity relies on hiding assets, data, or mechanisms rather than implementing proper security controls. Attackers can discover hidden data through steganography analysis, metadata inspection, source code review, hidden endpoint discovery, and blockchain/protocol-specific analysis.
-
 ---
 
 ## Types
@@ -201,4 +200,3 @@ curl -s "https://target.com/" | grep -oE '"[A-Za-z0-9+/=]{20,}"' | head -3
 | **Metadata policy** | Enforce metadata removal in CI/CD for all build artifacts |
 
 ---
-

skills/pentest/playbooks/supply-chain.md

@@ -6,7 +6,6 @@
 **CWE:** CWE-1104 (Use of Unmaintained Third-Party Components), CWE-1357 (Reliance on Insufficiently Trustworthy Components)
 
 Supply chain vulnerabilities arise from using third-party components, libraries, or services that contain known security flaws. This includes outdated libraries with known CVEs, typosquatting attacks, dependency confusion, and vulnerable transitive dependencies.
-
 ---
 
 ## Types
@@ -183,4 +182,3 @@ nmap --script ssl-enum-ciphers -p 443 target.com 2>/dev/null | grep -E "(TLS|SSL
 | **Dependency review** | Review transitive dependencies; remove unused dependencies |
 
 ---
-