xss-stored
Fail
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: HIGHDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides explicit payloads designed to exfiltrate sensitive information, including session cookies (
document.cookie), local storage, and page content, to external attacker-controlled URLs (e.g.,https://ATTACKER/steal,https://ATTACKER:8080/blind). - [CREDENTIALS_UNSAFE]: Multiple instructions target the theft of authentication tokens and session identifiers stored in cookies or local storage to facilitate session hijacking and account takeovers.
- [EXTERNAL_DOWNLOADS]: It recommends loading external JavaScript payloads from unverified third-party domains (e.g.,
js.rip,xss.ht) used by XSS callback frameworks. - [DATA_EXFILTRATION]: Includes specialized payloads for server-side PDF generation vulnerabilities that attempt to read sensitive system files, specifically targeting
/etc/passwd. - [COMMAND_EXECUTION]: Instructs the agent to execute shell commands to set up a local listener (
python3 -m http.server) for receiving exfiltrated data from target systems.
Recommendations
- AI detected serious security threats
Audit Metadata