G

ghost-bits-cast-attack

VERIFIED

by community

No community reviews yet
48,042,000installs
Updated Sep 2026

Use this page as a decision snapshot for ghost-bits-cast-attack: trust signal, install momentum, real user feedback, and high-intent related pages you can compare next.

|Compare

Description

# SKILL: Ghost Bits / Cast Attack — Java char to byte Narrowing Playbook > **AI LOAD INSTRUCTION**: This is a Java-only injection-enabling primitive, > not a standalone vulnerability class. Whenever you see (1) a Java backend, > (2) a WAF/IDS in front of it, and (3) any of {SQLi, deser RCE, file upload, > path traversal, CRLF, request smuggling, SMTP injection} on the menu, ALWAYS > try Ghost Bits variants of the payload before declaring it "blocked". The > root cause is the silent loss of the high 8 bits w

Install ghost-bits-cast-attack

Run this in your OpenClaw agent to add ghost-bits-cast-attack from the ClawHub registry.

terminal
$openclaw skills install crlf-injection

Requires ClawHub registry access. Review the security analysis below before installing.

Security Analysis

危险50/100

Open Source

Code is publicly available for audit.

Community Verified

Reviewed by the ClawHub community.

Community Reviews

Real user ratings only — separate from the editorial assessment and ClawHub signal.

No community reviews yet

Installed this skill? Sign in and leave the first review.

Save the skill now, come back after testing it, and help the next person choose with a quick review.

Frequently asked questions

Is ghost-bits-cast-attack safe to install?

ghost-bits-cast-attack has a SkillsReview security score of 50/100. It is open source and community-verified on ClawHub. Check the full Security Analysis on this page before installing.

How much does ghost-bits-cast-attack cost?

ghost-bits-cast-attack is free to install for OpenClaw via ClawHub.

What are the best alternatives to ghost-bits-cast-attack?

You can compare ghost-bits-cast-attack side by side with similar OpenClaw skills on the SkillsReview comparison page to find the best fit for your workflow.

How do I install ghost-bits-cast-attack?

Install ghost-bits-cast-attack from ClawHub at clawhub.ai/skills/crlf-injection, or use the install action on this page to copy the command for your OpenClaw agent.

Community Signal

ClawHub Community Score2040.00 / 5.00
Installs48,042,000
Last UpdateSep 23, 2026
Actively maintained (0d ago)
ClawHub community score is a third-party marketplace signal. It is shown separately from SkillsReview editorial assessment and real user review averages.
View on ClawHub →

Historical movement

Timeline plus trend snapshots for security, reviews, and reputation tilt.

Open timeline →
Beta · Data may lag

Trend Charts

30 / 90 / 180 day snapshots for ranking movement and security-score movement.

Last updated unknown UTC

Loading trend data…

Submit your review

Share your experience and help others find the best skills.

Newsletter

Stay updated on ghost-bits-cast-attack and the wider SkillsReview ecosystem

Get the weekly Top 5, fresh security alerts, and newly hot skills by email. You can unsubscribe from any newsletter email in one click.

One email a week. No spam. Unsubscribe any time from the email footer.

ghost-bits-cast-attack — OpenClaw Skill Review | SkillsReview