payloads-encoding
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and reference tool for security researchers. It provides a curated list of payloads derived from the well-known 'PayloadsAllTheThings' repository for testing web application firewalls and input filters.
- [OBFUSCATION]: The skill contains a homoglyph example ('раypal.com' using the Cyrillic 'р') in the Punycode section. This is identified as a legitimate educational demonstration of IDN spoofing and homoglyph attacks, rather than an attempt to deceive the agent or the user.
- [DYNAMIC_EXECUTION]: The skill includes code snippets in Python, PowerShell, and SQL. These are descriptive examples demonstrating how various technologies handle encoding and normalization (e.g., using
unicodedata.normalizeor SQL collation) and do not pose a security risk to the agent environment.
Audit Metadata