The Agent Skills Directory

[SAFE]: The skill provides structured methodologies and educational content for security professionals to audit WebSocket implementations. All commands and techniques align with legitimate security research purposes.
[COMMAND_EXECUTION]: Employs standard reconnaissance and testing tools such as grep, curl, nmap, and wscat. These are used appropriately for endpoint discovery and protocol probing within a security context.
[EXTERNAL_DOWNLOADS]: Recommends the installation of standard security utility packages (wscat, websocat) from official and well-known package managers (NPM, Homebrew).
[DATA_EXFILTRATION]: Describes the use of Out-of-Band Application Security Testing (OAST) services, such as Burp Collaborator (oastify.com), to verify the impact of discovered vulnerabilities. This is an established industry practice for validating proof-of-concepts.
[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external data sources like JavaScript files and URL lists using grep. This represents a low-risk attack surface that is necessary for the skill's primary function as a security analysis tool.

hunt-websocket