web-xxe
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides legitimate educational and reference material for identifying and testing XML External Entity (XXE) vulnerabilities. The payloads provided (e.g., targeting /etc/passwd or win.ini) are standard industry examples for security research and bug bounty activities.
- [NO_CODE]: The skill consists entirely of Markdown documentation (SKILL.md, cheatsheet.md, detection.md) and does not contain any executable scripts, automated commands, or dynamic configuration that could be misused for unauthorized operations.
- [REMOTE_CODE_EXECUTION]: While the documentation mentions Remote Code Execution (RCE) as a potential outcome of XXE, it does not provide active RCE payloads; mention of the 'expect://' wrapper is limited to defensive detection patterns in a Sigma rule.
- [OBFUSCATION]: The skill uses HTML entities (%) within XML DTD examples. This is a technical requirement for nested XML entity declarations rather than an attempt to evade security scanners or hide malicious intent.
Audit Metadata