UN64DD/web-vuln-scanner ? reverse-engineered prompt

Build me a simple web vulnerability scanner in Python with a Flask web app. I want to paste in a website URL, click a scan button, and have it crawl the site, find internal links and forms, and test for common issues like XSS and SQL injection. Show the results clearly in the browser, including which page or form looked vulnerable and what test payload triggered it, and also save a readable report to a markdown file.

Please keep the interface clean and easy to use, with a basic home page and a results page. It should work with a few common Python libraries for requests and HTML parsing, and it should be easy to run locally. If you need to check current docs or best practices while building it, go ahead and look them up online. Make sure it’s meant for safe, authorized testing only, and include a simple example or two of how to run it on a local machine.