{"slug":"elementalsouls-hunt-cache-poison","source_name":"elementalsouls/hunt-cache-poison","name":"Elementalsouls/Hunt Cache Poison","description":"Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflected→stored XSS via cache, classic Omer-Gil Web Cache Deception, Cloudflare Cache Deception Armor bypass, session-token cache deception, Akamai hop-by-hop smuggling → server-side edge poisoning, and Kettle's 2024 path-normalization WCD against Cloudflare/Fastly/GCP. Host/X-Forwarded-Host injection that reaches app logic (reset-link","version":1,"lift":{"pass_rate_delta_pts":8.7,"pass_rate_pct":95.7,"total_cases":23,"passed_cases":22,"tokens_delta_pct":259.2,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-04T18:35:13.856377+00:00"},"skill_score":0.9565,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":8.7,"with_pass_pct":95.7,"without_pass_pct":87,"tokens_delta_pct":259.2,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-04T18:35:13.856377+00:00","run_id":"7608d477-23f9-4fd8-a811-4a3354dfaaf5","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"NOASSERTION","install_count":0,"manifest_hash":"c63d0e47623f1632dae96c628fa6753fda9589161820694eaef45c88b9f0e501","raw_url":"https://app.decimal.ai/s/elementalsouls-hunt-cache-poison/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-hunt-cache-poison"}