testing-request-smuggling SKILL.md skillA
testing-request-smuggling from unboundcompute/security-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add unboundcompute/security-agent-skills/testing-request-smuggling@git:20260816.e670f56Pins git:20260816.e670f56 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- unboundcompute/security-agent-skills
- Path
skills/testing-request-smuggling/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260816.e670f56, committed Aug 16, 2026
- Size
- 6,714 bytes
- Repository stars
- 26
- License
- MIT
Test whether a chain of HTTP servers disagrees about where one request ends and the next begins, letting an attacker smuggle a request past the front end into the back end. Covers front-end and back-end desync from conflicting length signals, connection-reuse poisoning, single-packet and timing detection, and adjacent boundary confusion where a proxy and origin parse framing differently. Use when reviewing a reverse proxy, load balancer, CDN, or any multi-hop HTTP path where two parsers sit in…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Testing request smuggling: the bug is between two servers When two HTTP servers sit in series and parse a request's boundaries differently, the front end forwards what it thinks is one request while the back end sees two, and the smuggled second request is attributed to the next client on the reused connection. That desync lets an attacker prefix a victim's request, bypass front-end controls, poison the connection, and capture other users' traffic. The bug is a disagreement between parsers, not a single flaw in one. ## When to use - You are reviewing a reverse proxy, load balancer, CDN, or gateway in front of an origin. - Requests pass through more than one HTTP parser in series. - Connections between hops are kept alive and shared across clients. ## Scope check Test chains you own or are authorized to test, and keep every probe on your own traffic. Do not target other users' live requests. If you can't name the authorization, stop. ## The loop 1. **Map the server chain and the reused connections.** Identify every hop a request passes through (edge, proxy, balancer, cache, origin) and where connections between …
Read the whole file at its exact version.
How to install
mdr add unboundcompute/security-agent-skills/testing-request-smuggling@sha256:27919571575c2334The line at the top of this page pins the label git:20260816.e670f56, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4maykiykljpcunaq)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 16, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6714 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
unboundcompute/security-agent-skills · 26 stars · license MIT · pushed 2026-09-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4maykiykljpcunaq GET https://markdownregistry.com/api/v1/resolve?ref=unboundcompute/security-agent-skills/testing-request-smuggling GET https://markdownregistry.com/api/v1/blob/27919571575c233410f3aad4a763b7ea11f86d7897df92103cf64d2e6f7ba7d1
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.