SkillsAdd

wgpsec/aboutsecurity

prototype-pollution-exploit

JavaScript 原型链污染漏洞利用方法论。当目标为 Node.js 应用、使用 lodash/jQuery/深拷贝函数、接收 JSON 输入时使用。覆盖 Server-side（RCE/权限绕过）和 Client-side（XSS/DOM 操控）两种场景

First seen Apr 22, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

prototype Similar name
mattpocock/skills 743.9K installs
prototype Similar name
emilkowalski/skills

Build multiple genuinely different versions of a UI piece you describe, rendered behind a visua…

77.5K installs
prototype Similar name
vinvcn/mattpocock-skills-zh-cn

构建一次性原型来回答一个设计问题。适用于用户想验证某个 state model 或 logic 是否感觉对，或探索 …

4.8K installs
prototype-pollution Similar name
yaklang/hack-skills

>- Prototype pollution testing for JavaScript stacks. Use when user input is merged into object…

2.9K installs
prototype-pollution-advanced Similar name
yaklang/hack-skills

>- Advanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasse…

2.9K installs
prototype-fast Similar name
gamedev-skills/awesome-gamedev-agent-skills

Build a playable prototype in about an hour to answer one question — is it fun? — with greybox …

2.2K installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 17 installs