Payloads

Provides curated exploitation payloads for authorized security testing, including anti-virus test files, malicious files, and file name exploits.

This skill is internally consistent with being a curated payload collection for authorized testing, but it contains real test payloads that will trigger antivirus and can exploit or crash services if used incorrectly. Only install/use in authorized contexts and isolated test environments (VMs, containers, labs). Manually review the included files (especially files with backticks, $(...), null-bytes, SWF/PNG/GIF PoCs, and any encoded/obfuscated blocks) before running or uploading them to any system. Verify the skill's provenance (it cites SecLists/GitHub but source is 'unknown') — if you need these payloads, prefer pulling directly from the upstream SecLists repository or a trusted mirror. If you see any embedded base64 or unexpected network endpoints, do not run them and get a security review.

Type: OpenClaw Skill Name: payloads Version: 1.0.0 This skill bundle is a curated collection of security testing payloads sourced from the reputable SecLists project, intended for authorized penetration testing and educational purposes. It contains standard industry test files such as the EICAR anti-virus test string (eicar-com.txt), command injection filename patterns, and PHP info payloads for testing file uploads. The instructions in SKILL.md and the associated documentation are transparent about the nature of the files and do not contain any malicious logic, exfiltration attempts, or prompt-injection attacks.