The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides bash script templates using curl, awk, jq, and base64 to automate security testing of web applications. These scripts are intended for local execution by the agent to probe user-specified targets for session-related flaws like fixation and inadequate logout invalidation.
[EXTERNAL_DOWNLOADS]: Uses curl to interact with external web targets. This is limited to fetching HTTP responses for security analysis (status code checks and body diffs) rather than downloading and executing third-party scripts or executables.
[DATA_EXPOSURE]: Includes hardcoded test credentials (attacker@example.com, CorrectHorse1, victim@example.com, OldPass!1) within the command templates. These are clearly identified as non-sensitive placeholders used for demonstrating the testing methodology and do not represent a credential leak.

hunt-session