skills/chrissargent48/antigravity-awesome-skills/Cross-Site Scripting and HTML Injection Testing/Gen Agent Trust Hub
Cross-Site Scripting and HTML Injection Testing
Warn
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONOBFUSCATIONDYNAMIC_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides functional payloads designed to capture and exfiltrate sensitive browser data, such as session cookies and user keystrokes, to external endpoints (e.g.,
attacker.com).\n- [OBFUSCATION]: It contains instructions on bypassing security mechanisms using various obfuscation methods, including Base64 encoding of payloads, HTML entity encoding, and JavaScript string manipulation to evade detection by Web Application Firewalls (WAFs) and filters.\n- [DYNAMIC_EXECUTION]: The instructions encourage the use of dynamic execution sinks such aseval(),Function(), andsetTimeout()to process and execute injected JavaScript code within the target application's context.
Audit Metadata