payloads-open-redirect
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as an informational resource, providing a collection of payloads and a methodology for testing Open Redirect vulnerabilities. It incorporates well-known security research materials from established public repositories.
- [NO_CODE]: There are no executable scripts, configuration files, or automated commands within the skill. All content is educational markdown describing manual testing steps and payload examples.
- [INDIRECT_PROMPT_INJECTION]: The workflow involves the ingestion of untrusted data from external target systems (URLs, parameters, and endpoints) during the reconnaissance phase. While this presents an inherent attack surface common to security tools, the skill itself provides methodology rather than automated processing of that data.
- Ingestion points: External target technology stacks, endpoints, and input vectors identified in Step 1 (SKILL.md).
- Boundary markers: Not present.
- Capability inventory: The skill suggests capturing PoC evidence using
curl(SKILL.md). - Sanitization: Not mentioned for external data.
Audit Metadata