skills/jeremylongshore/tons-of-skills-marketplace/scanning-for-xss-vulnerabilities/Gen Agent Trust Hub
scanning-for-xss-vulnerabilities
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external codebase content and web responses, creating a surface for indirect prompt injection vulnerabilities.
- Ingestion points: The skill utilizes
Read,Grep, andWebFetchtools to process local files and remote web content as specified inSKILL.md. - Boundary markers: The instructions lack explicit boundary markers or directions for the agent to ignore instructions embedded within the data being scanned.
- Capability inventory: The skill has the capability to read local files and perform network requests.
- Sanitization: No sanitization or validation logic for the ingested content is described in the provided instructions.
- [NO_CODE]: The skill's
scripts/andassets/directories reference several Python scripts and templates (e.g.,xss_scan.py,waf_bypass.py) that were not included in the provided files. Consequently, the executable logic of the skill could not be audited for potential security issues like arbitrary command execution or unauthorized data access.
Audit Metadata