The Agent Skills Directory

[SAFE]: The skill serves as a comprehensive educational resource for security professionals. All detected patterns are associated with the intended primary purpose of the skill and do not represent a threat to the agent or its environment.
[COMMAND_EXECUTION]: Provides example CLI commands for network auditing and log analysis.
Evidence: curl -sk "https://target.com/search?q=XSSCANARY" | grep -i "XSSCANARY" in SKILL.md used for reflection testing.
Evidence: grep -rn "innerHTML\|document\.write\|eval(\|setTimeout(\|location\.hash\|location\.search" --include="*.js" in SKILL.md used for static code analysis.
[REMOTE_CODE_EXECUTION]: Lists various JavaScript and HTML payload examples used for demonstrating vulnerability verification and WAF bypass techniques.
Evidence: <svg onload=eval(atob('YWxlcnQoMSk='))> in SKILL.md (decodes to alert(1)).
Evidence: [Click me](javascript:alert(document.domain)) in SKILL.md for markdown testing.
[EXTERNAL_DOWNLOADS]: References common security testing domains for Out-of-Band (OOB) detection.
Evidence: bxss-err-<random>.<collab>.oastify.com (Burp Collaborator) in SKILL.md used for blind XSS validation.

hunt-xss