payloads-xxe
Warn
Audited by Socket on Nov 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is a comprehensive dual-use XXE exploitation guide. It contains no evident installer, credential theft from the user, or hidden execution, but it directly enables file disclosure, SSRF, out-of-band exfiltration, and denial of service; treat it as high risk and restrict use to explicitly authorized testing.
Confidence: 97%Severity: 84%
Audit Metadata