← All skills
eni-field-journal
75 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By alicewe1/alice_skill (GitHub) · coding · 63 stars · scanned at commit 19a54ac
[DOCUMENTATION ONLY] [仅文档] 全局自动路由 | Field Journal reference and tooling
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: api.certspotter.com, cross.{target_proxy_root}, {target}, {proxy}, {target_domain}
The author does not mention this.
Found in 32 places.
Show 17 more
- _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 35
- 出口 `Origin`/`Referer` 自动改写成目标 URL 的源(Worker `fetch()` 默认行为) - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 42
- **结论**: CF Worker `fetch()` 内置的 private IP block 在最终目标层强制生效,**编码/重定向都没用** - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 50
- 用 `curl -c jar.txt` 抓 cookie → cookie jar 把 cookie 注册到 `.{target_proxy_root}` 域 - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 65
| `Invoke-WebRequest` 探响应头报 "Operation is not valid due to the current state of the object" | Windows PowerShell 5.1 处理 302 + 复杂头部出 bug | 直接用 Bash + curl | 2 分钟 - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 78
curl -s 'https://{target}/.well-known/cloudflare-access-protected-resource/' - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 81
curl -s 'https://api.certspotter.com/v1/issuances?domain={root}&include_subdomains=true&expand=dns_names' - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 84
curl -s 'https://{proxy}/?url=https%3A%2F%2Fhttpbin.org%2Fanything' | jq '.headers, .origin' - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 91
curl -c jar.txt 'https://cross.{target_proxy_root}/?url=https%3A%2F%2F{attacker_host}%2Fset-cookie' - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 95
curl -b jar.txt 'https://cross.{target_proxy_root}/?url=https%3A%2F%2Fhttpbin.org%2Fcookies' - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 101
curl "https://cross.{target_proxy_root}/?url=$ENC" - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 105
curl -i 'https://cross.{target_proxy_root}/?url=https%3A%2F%2Fhttpbin.org%2Fresponse-headers%3FX-Frame-Options%3DALLOW%26CSP%3Ddefault-src%2520%2A' - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 112
async fetch(req) { - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 120
const up = await fetch(t, { - _modules/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 159
| `Invoke-WebRequest` (PS 5.1) | 处理 302 + 复杂头会抛 "Operation is not valid",**完全不可靠**,Web 渗透一律走 `curl` | - _modules/eni-field-journal/2026-05-26_pentest-newapi-rate-limit-bypass.md, line 36
curl -k -s https://{target_domain}/api/status - _modules/eni-field-journal/2026-05-26_pentest-newapi-rate-limit-bypass.md, line 37
curl -k -s https://{target_domain}/api/pricing - _modules/eni-field-journal/2026-05-26_pentest-newapi-rate-limit-bypass.md, line 40
curl -k -s -o /dev/null -w "%{http_code}\n" \
and 12 more places
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 4 places.
Show 1 more
Downloads and installs other software
The author does not mention this.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'eni-field-journal' ] || [ -L ~/.agents/skills/'eni-field-journal' ]; then echo 'A skill folder named eni-field-journal already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/alicewe1/alice_skill' "$d" && git -C "$d" checkout --quiet '19a54ac988e9929160334271f5c1924ddd9b227e' -- '_modules/eni-field-journal' && mkdir -p ~/.agents/skills && cp -R "$d"/'_modules/eni-field-journal' ~/.agents/skills/'eni-field-journal' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'eni-field-journal' ~/.claude/skills/'eni-field-journal' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for alicewe1/alice_skill shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/alicewe1/alice_skill/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | 19a54ac | 75 |