The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides documentation and functional payload examples for achieving remote code execution (RCE) via Node.js template engines such as EJS, Pug, Handlebars, and Nunjucks.\n- [COMMAND_EXECUTION]: The skill contains instructional content on how to utilize Node.js core modules, specifically child_process.spawn and child_process.execSync, to execute shell commands through prototype pollution gadgets.\n- [DYNAMIC_EXECUTION]: The documentation covers exploitation of template engine compilers and child process spawning where object prototype properties are used to inject executable code at runtime.\n- [OBFUSCATION]: The skill describes techniques to bypass prototype pollution filters using unicode escapes (e.g., \u0000, \u000a) and alternative object property paths like constructor.prototype.

prototype-pollution-advanced