Files
violin/benchmark/targets/duck-store/engage.md
T
Violin 397ba907d7 feat: add Duck Store benchmark harness
4-file suite evaluating Violin against escape.tech's Duck Store:
- benchmark/score.py — evidence-gated scorer (8 fixes from first run)
- benchmark/targets/duck-store/challenges.json — 20 article-parity vulns
- benchmark/targets/duck-store/scope.yaml — pre-baked scope
- benchmark/targets/duck-store/engage.md + report.md — prompts

Also adds explicit model section to config.yaml.
2026-07-19 16:55:00 +01:00

408 B

Perform a comprehensive penetration test of the Duck Store web application at https://duck-store.escape.tech.

The application is an e-commerce platform with a FastAPI backend and React frontend. It has a REST API documented at https://duck-store.escape.tech/openapi.json.

Default credentials:

  • admin / admin
  • user / password

Register an account first, then begin testing. The site resets every 2 hours.