HTML Injection Testing
Warn
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSOBFUSCATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides multiple
curlcommand examples and a Python script designed to automate network-based injection attacks against web applications. - [DATA_EXFILTRATION]: Contains instructions and payloads for stealing credentials via injected forms and exfiltrating session cookies to external domains like
attacker.com. - [EXTERNAL_DOWNLOADS]: Includes a Python script that utilizes the
requestslibrary to interact with external target servers, which could be used for scanning or exploitation. - [OBFUSCATION]: Features URL-encoded payloads that embed phishing forms and malicious redirects, concealing the intended behavior from simple text-based inspection.
Audit Metadata