dangling-markup-injection
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and testing playbooks for web security researchers. It covers the technical aspects of dangling markup injection as an alternative to XSS when script execution is blocked by Content Security Policy (CSP).
- [SAFE]: The document uses 'attacker.com' as a standard placeholder domain for illustrative purposes. No active malicious infrastructure or real-world attack targets are referenced.
- [SAFE]: There are no executable scripts, software dependencies, or network-bound components included in the skill. It consists entirely of markdown documentation and static HTML code examples.
Audit Metadata