html-injection-testing
Warn
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides multiple actionable curl commands designed to interact with target web applications, including examples for submitting payloads via GET and POST requests.
- [REMOTE_CODE_EXECUTION]: Includes a functional Python script for automated vulnerability testing that utilizes the requests library to send payloads and analyze server responses.
- [DATA_EXFILTRATION]: Provides specific templates for credential harvesting, including fake login forms and invisible tracking elements designed to exfiltrate data to external domains such as attacker.com.
- [OBFUSCATION]: Demonstrates and utilizes various obfuscation techniques such as URL encoding, double encoding, and Unicode escaping to bypass security filters and hide malicious intent.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and processing untrusted data from target web responses. \n
- Ingestion points: The response.text field retrieved via the requests.get method in the Python fuzzing script (SKILL.md). \n
- Boundary markers: Absent in the testing scripts. \n
- Capability inventory: Includes network operations (requests.get) and shell command execution (curl). \n
- Sanitization: Absent in the provided testing workflows, although remediation advice is documented for developers.
Audit Metadata