About business-logic-vuln
A routing guide for business-logic and state-machine security issues, aimed at assessing workflows such as coupons, payments, approvals, and quotas. It recommends mapping states and one-time actions before checking timing windows, sequence dependencies, and cross-step authorization.
Key features
- 01Routes business-logic and state-machine issues
- 02Covers coupons, inventory, payments, and approvals
- 03Maps business states and one-time actions
- 04Checks for check-then-act timing windows
- 05Finds sequence dependencies and cross-step authorization gaps
Use cases
- 01Testing stacked discounts or price tampering
- 02Checking race conditions in payment and inventory flows
- 03Assessing bypasses in approval, quota, or trial workflows
- 04Tracing chains involving APIs, uploads, or object permissions
Install
Copy the command and run it in a terminal.
$
npx skills add https:/After installing, type/business-logic-vulnin Claude Code to confirm it loaded.
Details
From the project READMEBusiness Logic Router
This is the routing entry point for business-logic and state-machine issues.
When to Use
- The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions
- The issue is not parser-level; it is about when checks happen and which business conditions are checked
- You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws
Skill Map
Recommended Flow
- First map key business states and one-time actions
- Then check for check-then-act windows, sequence dependencies, or missing cross-step authorization
- If the chain depends on APIs, uploads, or object permissions, return to the corresponding router skill to complete the path
Related Categories
Comments
Markdown supported