The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes instructions and example commands for using common security tools like curl, dalfox, gau, kxss, paramspider, and XSStrike. These are standard tools in the security industry for authorized web application testing.
[REMOTE_CODE_EXECUTION]: The skill includes a Python script scripts/xss_agent.py that automates XSS testing. This script uses the requests library to perform network operations against a target URL provided by the user. The behavior is documented and intended for security auditing purposes.
[EXTERNAL_DOWNLOADS]: The documentation references official repositories for security tools, such as github.com/hahwul/dalfox, github.com/lc/gau, and github.com/s0md3v/XSStrike. These are well-known resources in the cybersecurity community.
[SAFE]: The skill adheres to the 'rifteo' vendor context. The external resources, naming conventions, and script functionality are consistent with a developer/security toolkit provided by the author. No malicious obfuscation, credential exfiltration, or unauthorized persistence mechanisms were detected.

xss-hunter