Webvuln Surface

Description

--- name: webvuln-surface description: Builds the TESTABLE request surface for the active web-vuln tier from an ingested program. Merges the passive gau/endpoint corpus with a light authenticated Playwright crawl to inventory live endpoints, parameters, forms, JSON bodies, API routes, and reflected inputs. Output is a prioritized injection-point list (out/<slug>/webvuln/surface/<ts>.json) that the class hunters consume. Gated by the §1 active-compliance gate. Does NOT send payloads, exploit, or

Installation

Installs to ~/.claude/agents/kennyalfredo-pr-agent-webvuln-surface.md

Restart Claude Code, or start a new session, for it to be picked up.