payloads-encoding

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation and reference tool for security researchers. It provides a curated list of payloads derived from the well-known 'PayloadsAllTheThings' repository for testing web application firewalls and input filters.
  • [OBFUSCATION]: The skill contains a homoglyph example ('раypal.com' using the Cyrillic 'р') in the Punycode section. This is identified as a legitimate educational demonstration of IDN spoofing and homoglyph attacks, rather than an attempt to deceive the agent or the user.
  • [DYNAMIC_EXECUTION]: The skill includes code snippets in Python, PowerShell, and SQL. These are descriptive examples demonstrating how various technologies handle encoding and normalization (e.g., using unicodedata.normalize or SQL collation) and do not pose a security risk to the agent environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 01:36 PM