Ffuf web fuzzing

Skill newmindsgroup/ai-agent-skills-library/sources/sickn33-antigravity-awesome-skills/skills/ffuf-web-fuzzing

Shared library of AI agent skills — works across Claude Code, Cursor, Codex, Windsurf, OpenCode, and Google Antigravity via a single universal installer.

Install

npx -y skills add newmindsgroup/ai-agent-skills-library --skill ffuf-web-fuzzing

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis

The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

2.5 KB, as published. Nobody here has run it

FFUF (Fuzz Faster U Fool) Skill

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis

When to Use

You are fuzzing web targets with ffuf during authorized security testing or penetration testing.
The task involves content discovery, subdomain enumeration, parameter fuzzing, or authenticated request fuzzing.
You need guidance on wordlists, filtering, calibration, and interpreting ffuf results efficiently.

Core Workflow

Confirm the request matches this skill's trigger, scope, and risk profile.
Use the topic map to identify the relevant pattern, checklist, or example before writing detailed guidance or code.
Load references/full-guidance.md when implementation details, examples, anti-patterns, validation checks, or edge cases are needed.
Apply only the relevant guidance instead of loading or repeating the entire reference by default.
Verify the result against any validation checks, limitations, security notes, or platform constraints in the reference.

Topic Map

Overview
Installation
Core Concepts
The FUZZ Keyword
Multi-wordlist Modes
Common Use Cases
Directory and File Discovery
Subdomain Enumeration
Parameter Fuzzing
POST Data Fuzzing
Header Fuzzing
Filtering and Matching
Matchers (Include Results)
Filters (Exclude Results)
Auto-Calibration (USE BY DEFAULT!)
Rate Limiting and Timing
Rate Control
Time Limits

Reference Map

references/full-guidance.md preserves the complete original guidance, including examples and detailed edge cases.

Limitations

Use this skill only when the task clearly matches the scope described above.
Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Progressive Loading

Keep this SKILL.md as the compact routing and workflow entrypoint. Load the reference file only when the user task requires the deeper implementation material.