prototype-pollution

Detects prototype pollution vulnerabilities in Node.js, Python, and browser JavaScript.

54|5|Updated May 9, 2026

Search Tags:#xss #javascript #security testing #nodejs #vulnerability detection #rce #prototype pollution

Ready to run

npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill prototype-pollution-jinyimeng01

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: prototype-pollution
Source: https://github.com/jinyimeng01/mastermind-bug-bounty/tree/main/skills/prototype_pollution
Command: npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill prototype-pollution-jinyimeng01

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security researchers identify prototype pollution vulnerabilities that can alter application behavior and lead to issues such as XSS, RCE, or privilege-related flaws.

Core Features & Use Cases

Server-Side Detection: Tests Node.js merge patterns and Python class pollution paths for unsafe object manipulation.
Client-Side Analysis: Examines browser-side pollution vectors including URL parameters, DOM interactions, and JavaScript object behavior.
Gadget Chain Analysis: Maps potential exploitation paths involving template engines, sanitizers, and framework internals during authorized security assessments.

Quick Start

Use the prototype pollution skill to analyze my authorized application endpoints for safe prototype pollution test cases and potential gadget chains.

Frequently Asked Questions about prototype-pollution

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect prototype pollution vulnerabilities in Node.js and JavaScript applications?▼

Prototype pollution detection involves analyzing application code for unsafe object manipulation behavior in merge utilities and template engines. It identifies unsafe prototype traversal patterns, validates the pollution impact, and documents affected endpoints and gadget chain risks.

What is a prototype pollution gadget chain and how does it lead to XSS or RCE?▼

A prototype pollution gadget chain maps potential exploitation paths involving template engines, sanitizers, and framework internals. Altering application behavior through unsafe object manipulation creates paths that can lead to XSS, RCE, or privilege-related flaws during security assessments.

Can I test for client-side prototype pollution vectors via URL parameters and DOM interactions?▼

Yes, you can examine browser-side pollution vectors including URL parameters, DOM interactions, and JavaScript object behavior. This client-side analysis identifies how unsafe prototype traversal patterns affect browser JavaScript execution and validates the associated pollution impact.

Does prototype pollution detection work for Python class pollution paths and Node.js merge patterns?▼

Yes, server-side detection tests both Node.js merge patterns and Python class pollution paths for unsafe object manipulation. It applies controlled analysis to identify unsafe prototype traversal patterns across these different server-side environments during authorized security testing.

How do I document affected endpoints when validating prototype pollution impact?▼

Validating prototype pollution impact requires documenting affected endpoints and gadget chain risks discovered during authorized penetration testing. You map the potential exploitation paths involving template engines, sanitizers, and framework internals to record the specific unsafe object manipulation behavior.

When should I use prototype pollution detection during authorized penetration testing?▼

You should use prototype pollution detection during authorized penetration testing scenarios involving Node.js, Python, browser JavaScript, merge utilities, template engines, and client-side frameworks. It applies controlled analysis of object manipulation behavior to identify vulnerabilities that alter application behavior.