waf-bypass-methodology
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell command templates using
curlto demonstrate how to identify WAFs and test for vulnerabilities (e.g., inSKILL.mdandreferences/http-protocol-bypass.md). These templates use placeholders and are intended for reconnaissance during security assessments. - [REMOTE_CODE_EXECUTION]: In the file
references/parameter-bypass.md, the skill includes a literal PHP web shell snippet (<?php system($_GET['cmd']); ?>) within a multipart/form-data payload example. This is provided for educational purposes to illustrate how payloads can be encapsulated to evade detection. - [SAFE]: The skill follows security documentation best practices by using
TARGETas a placeholder for destination URLs andBOUNDARYfor multipart separators, ensuring that example commands cannot be executed against live targets without explicit user modification.
Recommendations
- CRITICAL: 2 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata