The Agent Skills Directory

[OBFUSCATION]: A Base64-encoded string was identified within a URL pointing to a security tool.
Evidence: The URL https://yeswehack.github.io/Dom-Explorer/dom-explorer#eyJpbnB1... contains an encoded hash.
Analysis: Upon decoding, the content was found to be a standard JSON configuration object defining parsing pipelines for the Dom-Explorer utility. This is a legitimate use of encoding for application state and does not represent a security risk.
[EXTERNAL_DOWNLOADS]: The skill provides numerous links to external security research repositories and educational resources.
Evidence: References to PayloadsAllTheThings on GitHub, PortSwigger Research, and HackTricks.
Analysis: These are well-established and reputable sources within the cybersecurity community. The skill uses them appropriately to provide research context without performing automated downloads or executions.
[SAFE]: The skill operates solely as a documentation and payload repository. It lacks any functionality for command execution, system persistence, or sensitive data exfiltration from the host environment.

payloads-dom-clobbering