cache-poisoning-smuggling
Audited by Socket on Sep 23, 2026
2 alerts found:
Securityx2SUSPICIOUS/HIGH-RISK skill. It is internally consistent as an exploit skill, but its purpose is to enable offensive web attacks against targets, including cache poisoning, request smuggling, ACL bypass, and token theft. No strong malware or credential-harvesting indicators are present, yet the capability itself is dangerous for an AI agent and creates substantial abuse risk.
This JSON fragment is an exploit-focused prompt/template package designed to guide generation of actionable HTTP request smuggling payloads (CL.TE, TE.TE) and CDN cache poisoning leading to persistent XSS via unkeyed headers (X-Forwarded-Host). It contains no executable malware logic, but it meaningfully enables real-world attack execution when consumed by an agent/harness, making it a high security risk from a supply-chain/security standpoint.