payloads-cors
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill consists of educational documentation and proof-of-concept payload examples derived from the PayloadsAllTheThings repository.
- [EXTERNAL_DOWNLOADS]: The skill provides links to reputable security tools and documentation on GitHub, PortSwigger, and HackerOne for informational purposes. No automated downloads or executions are triggered.
- [DATA_EXFILTRATION]: While the proof-of-concept scripts demonstrate how data can be exfiltrated from a misconfigured target website, the skill does not contain any functionality to access or exfiltrate the agent's or user's sensitive information.
- [OBFUSCATION]: Analysis confirmed the absence of obfuscated code, base64-encoded commands, zero-width characters, or homoglyph attacks. All payload examples are provided in plain text for review.
Audit Metadata