payloads-css-injection
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides links to security research repositories on GitHub and a tool image on the GitHub Container Registry.
- [COMMAND_EXECUTION]: Instructions are provided for running a layout-based exfiltration tool via a docker command.
- [DATA_EXFILTRATION]: The skill documents various techniques and payload templates for leaking sensitive attributes, such as tokens or passwords, from web pages to external domains.
Audit Metadata