skills/mukul975/anthropic-cybersecurity-skills/performing-clickjacking-attack-test/Gen Agent Trust Hub
performing-clickjacking-attack-test
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill describes shell commands for header analysis and local hosting of test pages using Python's http.server module.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the requests library and curl to fetch data from target URLs to evaluate framing protections.
- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface in scripts/agent.py via requests.get() which reads headers and bodies from external URLs. While it lacks explicit boundary markers, its capabilities are restricted to detection via substring matching and local file writing of PoC code, with no dangerous interpolation into instructions.
- [METADATA_POISONING]: There is an inconsistency between the author 'mahipal' and the copyright holder 'mukul975', though this appears to be a documentation discrepancy rather than a malicious attempt to deceive.
Audit Metadata