xss-reflected
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute various command-line security tools, including
curl,dalfox, andXSStrike(viapython3), to automate vulnerability scanning and payload delivery. - [DATA_EXFILTRATION]: Includes example payloads designed to exfiltrate sensitive browser data, such as
document.cookie, to a user-specified remote server (https://ATTACKER). - [PROMPT_INJECTION]: The skill instructs the agent on specific methods to bypass security filters, Web Application Firewalls (WAFs), and Content Security Policies (CSP) to achieve arbitrary JavaScript execution. It also ingests untrusted data from external web pages via
curlandbrowser_openwithout explicit boundary markers or sanitization, creating a surface for indirect prompt injection. - [REMOTE_CODE_EXECUTION]: Leverages browser automation tools (
browser_evaluate) to execute dynamically generated JavaScript payloads within the context of a target application to verify vulnerability triggers. - [DATA_EXFILTRATION]: Static analysis detected the use of obfuscation techniques, such as Base64 encoding (
atob) chained with execution (eval), and various character encoding methods (hex, Unicode, HTML entities) to evade security detection mechanisms.
Audit Metadata