The Agent Skills Directory

[SAFE]: The skill contains technical documentation and payload examples for hunting XSS vulnerabilities. The deterministic detector flagged a Base64-encoded string (YWxlcnQoMSk=) chained with eval(atob(...)); this decodes to alert(1) and is explicitly presented as a WAF bypass technique for testing target applications. It does not represent a malicious obfuscation attempt within the skill's own code. The instructions focus on methodology, using unique canaries for testing, and established security tools like Burp Suite's Collaborator (oastify.com), all of which are standard practice for authorized security engagements.

hunt-xss