401-403-bypass
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill documents methods to circumvent web access control mechanisms, specifically targeting 401 and 403 response codes. It provides techniques for IP address spoofing using headers such as
X-Forwarded-For,X-Real-IP, andCluster-Client-IPto bypass IP-based white-lists, as well as path manipulation strategies to evade proxy or WAF routing rules. - [COMMAND_EXECUTION]: The documentation includes example shell commands for executing external security tools, including
./byp4xx.shandpython3 403bypasser.py, which are intended to automate the exploitation of access control vulnerabilities. - [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow where the agent processes external target URLs to apply bypass payloads. This creates a vulnerability surface where the agent might interact with and be influenced by adversarial content from untrusted target servers.
- Ingestion points: Target URLs and the resulting HTTP response data processed by the agent (SKILL.md, references/path-manipulation-payloads.md).
- Boundary markers: Absent; no instructions are provided to the agent to treat target-derived data as untrusted or to use specific delimiters.
- Capability inventory: The skill utilizes the agent's ability to perform network requests with arbitrary headers and methods, and provides instructions for executing shell-based tools.
- Sanitization: Absent; there is no guidance on validating or escaping data returned from external targets before further processing.
Audit Metadata