smuggling

92 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By BitterSecurity/Decepticon (GitHub) · coding · 6,581 stars · scanned at commit bdb1016

HTTP Request Smuggling (HRS) — front-end / back-end parser disagreement attacks that desync the proxy stack. Covers CL.TE, TE.CL, TE.TE, CL.0, HTTP/2 downgrade (h2.cl, h2.te), pipelining, and connection-state pinning. Includes a confirm-desync gate, header obfuscation catalog, and minimal raw-socket Python harnesses (no smuggler.py available in sandbox).

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a coding skill.

Found in 5 places.

packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 38timeout 60 python3 -u -c '
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 322timeout 30 python3 -u -c '
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 359for cookie in $(grep -i "^Set-Cookie:" smuggle_admin_setcookie.txt | sed 's/Set-Cookie: //;s/;.*//'); do

Show 2 more

packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 558TARGET="http://<target>"
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 598URL_TEMPLATE='/devices/{NAME}/status'

Connects to the internet

This is disclosed by the author in the skill's SKILL.md or README.

Found in 10 places.

packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 210client = httpx.Client(http2=True, timeout=5.0, verify=True)
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 250| 1 | `curl -sv <TARGET>/` 2>&1 \| grep -iE '^(server\|via\|x-)' | First-line tier (front-most CDN/WAF/MITM banner) |
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 303| **A** — Response queue poisoning (admin-bot) | Concurrent admin user/bot browsing the target | 5× smuggle `GET /admin*` over 30s. If ANY response carries an a

Show 7 more

packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 312> **ANTI-PATTERN: DO NOT brute-force admin credentials when this tag is present.** When smuggling and a credentials-related tag co-occur, the design intent is "
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 361curl -s -b "$cookie" "$TARGET/admin_panel" | grep -E "FLAG\{|admin|<title>" | head -5
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 362curl -s -b "$cookie" "$TARGET/flag" 2>/dev/null
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 368A smuggled `Set-Cookie` that, when replayed via `curl -b`, gives you a different page than the unauthenticated baseline (e.g. admin dashboard instead of login r
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 521| **Server-side subprocess** | The diagnostic handler runs `curl` / `file_get_contents` / `requests.get(...)` from inside the application to a backend (`Host: i
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 562curl -s -i -c cookies.txt -d "username=$LOW_USER&password=$LOW_PASS" "$TARGET/<login_path>" | tee login.txt
packages/decepticon/decepticon/skills/standard/exploit/web/smuggling/SKILL.md, line 563curl -s -i -b cookies.txt -X POST "$TARGET$DIAG_ENDPOINT" | tee diagnostic_baseline.html

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'smuggling' ] || [ -L ~/.agents/skills/'smuggling' ]; then echo 'A skill folder named smuggling already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/BitterSecurity/Decepticon' "$d" && git -C "$d" checkout --quiet 'bdb1016c93ed687f61ac57481da298c25a47c8f5' -- 'packages/decepticon/decepticon/skills/standard/exploit/web/smuggling' && mkdir -p ~/.agents/skills && cp -R "$d"/'packages/decepticon/decepticon/skills/standard/exploit/web/smuggling' ~/.agents/skills/'smuggling' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'smuggling' ~/.claude/skills/'smuggling' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for BitterSecurity/Decepticon shows the score of its lowest-scoring skill.

SkillTrust badge for BitterSecurity/Decepticon

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/BitterSecurity/Decepticon.svg)](https://zalavijaysinh.github.io/skilltrust/repos/BitterSecurity/Decepticon/)

Score history

Date	Version	Score
2026-11-11	`bdb1016`	92
2026-11-08	`df87955`	92