obfuscation-skill

Detect obfuscated payloads in base64, hex, and encoded tokens.

3|Updated Feb 26, 2026
One-click install
npx skills add https://github.com/jbovet/oxidized-agentic-audit --skill obfuscation-skill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: obfuscation-skill
Source: https://github.com/jbovet/oxidized-agentic-audit/tree/main/tests/fixtures/obfuscation-skill
Command: npx skills add https://github.com/jbovet/oxidized-agentic-audit --skill obfuscation-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security scanners detect obfuscated payloads hidden in text, preventing potential covert threats from slipping through automated checks.

Core Features & Use Cases

  • Obfuscation payload detection across base64, hex, and encoded tokens.
  • Ignores code blocks and inline code to prevent false positives.
  • Use Case: QA teams can verify that the scanner flags obfuscated patterns while preserving benign content.

Quick Start

Run the obfuscation-skill fixture through the scanner to observe detections.

Frequently Asked Questions about obfuscation-skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect obfuscated payloads hidden in text content?

Obfuscated payloads are detected by scanning text for encoded tokens like base64 and hex strings. This fixture applies pattern detection to identify hidden threats while ignoring code blocks to prevent false positives, ensuring benign content is preserved during security testing.

Does obfuscation detection ignore code blocks to prevent false positives?

Yes, obfuscation detection ignores code blocks and inline code to prevent false positives. This ensures the scanner only flags genuinely encoded hidden threats like base64 and hex payloads, preserving benign content during security testing workflows.

What obfuscation forms are supported by security scanners for AI agent prompts?

Supported obfuscation forms include base64, hex, and other encoded tokens. The Skill detects these obfuscation patterns in AI agent prompts and content to prevent hidden threats, parsing and validating them without executing or exfiltrating data.

How do I test that my scanner flags obfuscated patterns while preserving benign content?

Run this fixture through the scanner to observe detections and verify it flags obfuscated patterns while preserving benign content. QA teams can use it to confirm that base64 and hex payloads are caught while code blocks are ignored to prevent false positives.

When do I need obfuscation pattern detection for security testing workflows?

Obfuscation pattern detection is needed when scanning AI agent skills and prompts for hidden threats in security testing workflows. It prevents covert payloads encoded in base64 or hex from slipping through automated checks without executing or exfiltrating data.