AgentToolHub
SkillClaude CodeCursorClineOpenClawWindsurfVS CodeChatGPT

dangling-markup-injection

Helping AI Agent become an awesome practical hacker!

Features

  • ✓Comprehensive security domain coverage
  • ✓Structured knowledge base for practical hacking
  • ✓Master entry, category entries, and deep topic skills
  • ✓14 security domains including web, API, and mobile
  • ✓Installable, searchable, and composable HackSkills
  • ✓Visit [HackSkills](https://github.com/yaklang/hack-skills) for more

Installation Guide

General Installation

bash
npx skills add yaklang/hack-skills

Raw URL Installation

bash
curl -fsSL https://raw.githubusercontent.com/yaklang/hack-skills/main/skills/hack/SKILL.md

Local Use as a Knowledge Base

bash
git clone https://github.com/yaklang/hack-skills.git
cd hack-skills

Offline ZIP (encrypted)

For air-gapped environments, slow networks, or any place where AV / EDR / browser content scanners strip plain offensive-security markdown:

bash
curl -fsSLO https://oss-qn.yaklang.com/hack-skills/latest/hack-skills.zip
7z x -phack-skills hack-skills.zip
# or:  unzip -P hack-skills hack-skills.zip

| Channel | URL |
|---|---|
| Primary CDN | <https://oss-qn.yaklang.com/hack-skills/latest/hack-skills.zip> |
| Backup CDN | <https://aliyun-oss.yaklang.com/hack-skills/latest/hack-skills.zip> |
| Build version manifest | <https://oss-qn.yaklang.com/hack-skills/latest/version.txt> |

About the password. The ZIP is wrapped with AES-256 and a public constant password hack-skills. This is not access control — anyone can download, anyone can extract, the password is printed openly in the README, the website, the GitHub Actions workflow, and CI logs. It exists solely to bypass content heuristics on AV / EDR / browser scanners that flag plain offensive markdown and silently drop or quarantine the file in transit. Build, encryption settings, and integrity verification all live in [.github/workflows/upload-hack-skills.yml](./.github/workflows/upload-hack-skills.yml).

Same ZIP is also surfaced one-click on the website's nav bar (ZIP button) and the Install → Offline ZIP tab.

Reviews