testing-cors-misconfiguration
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: CRITICALDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill provides HTML and JavaScript examples in SKILL.md (Steps 4 and 5) that capture sensitive cross-origin data and exfiltrate it to 'https://attacker.example.com/collect'. This specific destination URL has been flagged as malicious (phishing) by automated security scanners.\n- [COMMAND_EXECUTION]: The documentation and the 'agent.py' script provide automated methods to systematically probe and exploit server configurations using shell commands and targeted network requests.\n- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of 'corscanner', a third-party security tool, which represents an unverified external dependency.
Recommendations
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata