The Agent Skills Directory

[SAFE]: The skill is a static documentation file providing a playbook for security professionals. It describes how Open Redirects work and how they can be chained with other attacks like OAuth token theft or SSRF for educational and testing purposes.
[NO_CODE]: The analysis of SKILL.md reveals no executable code, shell scripts, or automation instructions. The file is composed entirely of Markdown text.
[EXTERNAL_DOWNLOADS]: The skill does not perform any network operations, download external dependencies, or reference remote scripts for execution. All domains mentioned (e.g., evil.com, trusted.com) are used as illustrative examples.
[DATA_EXFILTRATION]: There is no access to sensitive local files, environment variables, or credentials. The skill does not contain any capabilities to exfiltrate data from the host environment.
[PROMPT_INJECTION]: The 'AI LOAD INSTRUCTION' is a descriptive summary of the skill's contents for the model's context and does not attempt to override safety guidelines or bypass system instructions.

open-redirect