The Agent Skills Directory

[OBFUSCATION]: The skill includes an example payload <svg onload=eval(atob('YWxlcnQoMSk='))> within its WAF Bypass section. The use of atob for Base64 decoding is documented as a technique for evading simple security filters during vulnerability research, and the decoded content is a benign alert(1) call.
[DATA_EXFILTRATION]: The documentation references oastify.com (Burp Suite Collaborator) as a legitimate out-of-band confirmation mechanism for security testing. This reference is used to explain how to verify blind vulnerabilities and is not a mechanism for exfiltrating sensitive agent data.
[COMMAND_EXECUTION]: The skill provides various grep and curl command-line templates. These are intended for the user to perform manual security analysis on external targets and do not contain instructions for the agent to execute unauthorized commands on its own host environment.

hunt-xss