ffuf-claude-skill
Guide Web Fuzzing With ffuf
Web testers need focused ffuf guidance when planning directory, parameter, or virtual host fuzzing. This skill gives Claude, Codex, and Claude Code a simple workflow for web fuzzing discussions.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "ffuf-claude-skill" from https://skillstore.io/skills/sickn33-ffuf-claude-skill.md and its manifest at https://skillstore.io/api/skills/sickn33-ffuf-claude-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "ffuf-claude-skill". I need a safe plan for ffuf content discovery on my staging site.
Expected outcome:
- Confirms authorization and scope before testing.
- Lists target areas, wordlist selection criteria, filters, and rate limits.
- Adds review steps for false positives and reporting.
Using "ffuf-claude-skill". My ffuf results include many repeated responses.
Expected outcome:
- Suggests comparing response size, status, redirect behavior, and word count.
- Recommends documenting assumptions before excluding responses.
- Keeps manual validation before any conclusion.
Security Audit
SafeThe two static network findings are repository links in SKILL.md, not executable requests or exfiltration paths. No prompt injection, code execution, credential access, or unsafe instructions were found in the reviewed prompt-only skill.
Risk Factors
🌐 Network access (2)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-ffuf-claude-skill/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-ffuf-claude-skill?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-ffuf-claude-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-ffuf-claude-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-ffuf-claude-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). ffuf-claude-skill security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-ffuf-claude-skill/audits/4BibTeX citation
@techreport{sickn33-sickn33-ffuf-claude-skill-2026,
author = {sickn33},
title = {ffuf-claude-skill security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-ffuf-claude-skill/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ffuf-claude-skill security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/sickn33-ffuf-claude-skill/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-ffuf-claude-skill:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Plan Authorized Discovery
Create a focused ffuf testing plan for an approved web application scope.
Support Training Labs
Explain where ffuf fits in controlled web security exercises.
Prepare Review Notes
Summarize planned fuzzing scope, expected signals, and review checkpoints before testing starts.
Try These Prompts
Explain what ffuf is, when to use it, and what authorization checks I need before testing.
Help me plan an authorized ffuf web fuzzing session for this staging application scope: [scope].
Review my authorized ffuf test goals and suggest response filters, rate limits, and result triage steps.
Create an authorized ffuf workflow for a security team, including scope control, evidence handling, and reporting handoff.
Best Practices
- Confirm written authorization and scope before planning any fuzzing activity.
- Use rate limits and filters that match the target environment.
- Review findings manually before reporting security impact.
Avoid
- Do not fuzz systems without explicit permission.
- Do not launch high-volume scans against fragile or shared services.
- Do not treat status codes as proof without content validation.