{"slug":"elementalsouls-hunt-websocket","source_name":"elementalsouls/hunt-websocket","name":"Elementalsouls/Hunt Websocket","description":"Hunt WebSocket vulnerabilities — Cross-Site WebSocket Hijacking (CSWSH), missing/weak Origin validation on the WS handshake, no per-message authentication, message tampering, socket.io namespace/room authorization bypass, and handshake-layer Upgrade smuggling. Use when target has WebSocket endpoints (ws:// or wss://), socket.io / SignalR / Phoenix Channels, real-time features, chat, live dashboards, notifications, or trading platforms.","version":2,"lift":{"pass_rate_delta_pts":9.09,"pass_rate_pct":86.4,"total_cases":22,"passed_cases":19,"tokens_delta_pct":179.8,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-11T09:23:23.267792+00:00"},"skill_score":0.8636,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":9.09,"with_pass_pct":86.4,"without_pass_pct":77.3,"tokens_delta_pct":179.8,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-11T09:23:23.267792+00:00","run_id":"48507f67-48ad-4d3e-8ffe-f9748b474d46","latest_attempt":{"id":"48507f67-48ad-4d3e-8ffe-f9748b474d46","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-08-11T09:23:23.267792+00:00","gate":null},"version_number":2,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"59a050ebb5798320b7d87433f3abd50e6cac5bffb6ddca355e39d477f7e5cd5e","install_name":"elementalsouls-hunt-websocket","version_id":"e70a6810-3de3-4e7f-9162-e9df932a4c36","body_sha256":"59a050ebb5798320b7d87433f3abd50e6cac5bffb6ddca355e39d477f7e5cd5e","render_hash":"8212292c32b9cf6e440f854597ecad24ff379bd9632295b49f9f253ddfd0cfcb","raw_url":"https://app.decimal.ai/s/elementalsouls-hunt-websocket/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-hunt-websocket"}