The Agent Skills Directory

[SAFE]: The skill serves as documentation for security professionals. It details common attack vectors such as extension manipulation, MIME type bypasses, and magic byte injection for educational purposes.
[SAFE]: Included payloads like <?php system($_GET[0]); ?> and <svg onload=alert(document.domain)> are standard industry examples for demonstrating vulnerabilities and do not pose a threat to the agent or the local environment.
[SAFE]: The detection.md file provides valuable defensive content, including logging recommendations and a Sigma rule for identifying exploitation attempts in web server logs.
[SAFE]: No obfuscation, data exfiltration, unauthorized network requests, or credential exposure patterns were detected in the files provided. The skill's behavior is entirely consistent with its stated purpose of security training.

web-file-upload