Business Logic

Description

--- name: business-logic description: "Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362). Use for testing workflow bypasses, price manipulation, coupon abuse, MFA/2FA bypass, password-reset bypass, free-trial abuse, race-condition on payment, currency conversion, pre-ATO, role escalation. Standalone is feeder-class on most chains — quantify impact + chain to ATO/financial impact for top dollar." tools: Bash, Read, Write, Edit, Grep, WebFetch, mcp__writeup-search__search_write

Installation

Installs to ~/.claude/agents/h-mmer-pentest-agents-business-logic.md

Restart Claude Code, or start a new session, for it to be picked up.