OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Apr 30, 2026
Independent checks from skills.sh's audit partners.
This skill is a security research playbook for exploiting insecure deserialization vulnerabilities across Java, PHP, Python, .NET, and other languages. It contains numerous high-risk command execution templates and remote code execution payloads. An automated scanner flagged the referenced domain 'xxx.dnslog.cn' as malicious and identified 'SKILL.md' as suspicious due to the presence of exploitation-related HTTP request patterns. Additionally, the skill includes hardcoded default credentials for Apache Shiro.
Detected behaviors
2 alerts: gptSecurity
3 issues
2 findings · Score: 80/100