prototype-pollution-exploit

HIGH risk. This skill is an offensive exploit guide that equips an AI agent to identify and exploit prototype-pollution bugs for RCE, XSS, privilege bypass, account takeover, and data exfiltration. The scanner hits are mostly documentation-context examples, but the documented purpose itself is exploit enablement, and the added third-party tool installs further increase operational risk.

该输入包含面向服务端原型链污染、远程代码执行和数据外传的完整攻击指南及自动化 PoC。若在真实目标上运行，可导致任意命令执行、敏感文件读取和网络外传。它不是典型软件包源码，因而无法判断 npm 包安装行为或供应链植入；但作为攻击工具和利用文档，安全风险极高。