# Burp Suite/Web Security Skill

> Burp Suite/Web Security Skill is an Agent Skill for devops & security published in the a5c-ai/babysitter repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Web application security testing with Burp Suite integration

- Skill name: `Burp Suite/Web Security Skill`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/a5c-ai/babysitter/blob/HEAD/library/specializations/security-research/skills/burp-websec/SKILL.md
- Repository: a5c-ai/babysitter (1,548 GitHub stars when collected)

## SKILL.md

# Burp Suite/Web Security Skill

## Overview

This skill provides web application security testing capabilities with Burp Suite and OWASP ZAP integration.

## Capabilities

- Configure Burp Suite proxy and scanner
- Execute Burp extensions and macros
- Parse and analyze HTTP traffic
- Generate and send crafted requests
- Extract and analyze responses
- Support authentication handling
- Create and run active scan policies
- Generate web vulnerability reports

## Target Processes

- web-app-vuln-research.js
- api-security-research.js
- bug-bounty-workflow.js
- red-team-operations.js

## Dependencies

- Burp Suite (Professional for full features)
- OWASP ZAP (alternative)
- Burp REST API
- Python requests library
- mitmproxy (optional)

## Usage Context

This skill is essential for:
- Web application penetration testing
- API security assessment
- Bug bounty hunting
- Authentication testing
- Session management analysis

## Integration Notes

- Supports headless operation via REST API
- Can replay and modify captured requests
- Integrates with CI/CD for automated scanning
- Custom scan policies for targeted testing
- Report generation in multiple formats

---

Source: https://www.openparable.com/skill/devops-security/burp-suite-web-security-skill (OpenParable). Cite the canonical URL above.