payloads-deserial
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSOBFUSCATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides reference links to well-known security research and education platforms including the PayloadsAllTheThings repository on GitHub and PortSwigger's security labs. These are used for documentation and lab guidance purposes.\n- [OBFUSCATION]: The Base64 identifiers listed in the Deserialization Identifier table (such as 'rO' for Java and 'Tz' for PHP) are standard magic bytes used to identify serialized data types; they do not contain hidden commands or executable payloads.\n- [SAFE]: No security issues were detected. The skill's instructions and workflow are consistent with legitimate security research and penetration testing practices.
Audit Metadata