HTML Injection Testing
Fail
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: HIGHCOMMAND_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATIONOBFUSCATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides functional shell commands using
curldesigned to deliver malicious payloads to remote targets through GET and POST parameters. - [DYNAMIC_EXECUTION]: The skill includes a complete, executable Python script for automated fuzzing and vulnerability scanning of web applications using the
requestslibrary. - [DATA_EXFILTRATION]: Provides comprehensive methodologies and ready-to-use HTML and CSS templates for creating phishing pages and hijacking form actions to exfiltrate user credentials to attacker-controlled domains (e.g.,
attacker.com). - [OBFUSCATION]: The skill provides instructions and examples for evading security filters using techniques such as URL encoding, double encoding, and Unicode escapes for malicious payloads.
Recommendations
- AI detected serious security threats
Audit Metadata