Violin 7a0a0f89ae docs(coverage): teach systematic probes for persistent-miss vectors ...

- redirects-unvalidated.md: systematic open-redirect probe loop (17 params,
  Location-header capture, external-redirect follow, allowlist-substring bypass)
- auth-bypass.md: when to run default/weak creds (after user-enum finds admin;
  hand-testable set is not brute force)
- xss.md: URL-valued fields (avatar/link) as stored/blind XSS vectors
- business-logic.md: referral self-referral registration recipe (register A,
  refer B, check both sides for credit)
- exhaustive-coverage.md: mandatory auth/registration-flow coverage step so
  the routing triggers no matter which playbook the agent reads first

No benchmark names or session inventory; generic OWASP technique only.

2026-08-13 15:57:05 +01:00

..

playbooks

docs(coverage): teach systematic probes for persistent-miss vectors

2026-08-13 15:57:05 +01:00

SKILL.md

Release Violin 3.0.0 profile

2026-07-22 11:18:53 +01:00