xxe-xml-external-entity
by community
Use this page as a decision snapshot for xxe-xml-external-entity: trust signal, install momentum, real user feedback, and high-intent related pages you can compare next.
Description
# SKILL: XML External Entity Injection (XXE) — Expert Attack Playbook > **AI LOAD INSTRUCTION**: Expert XXE techniques. Covers all injection contexts (SOAP, REST JSON→XML parsers, Office files, SVG), OOB exfiltration (critical when direct read fails), blind XXE detection, and XXE-to-SSRF chain. Base models often miss OOB and non-XML context XXE. For real-world CVE chains, Office docx XXE step-by-step, PHP expect:// RCE, and Solr XXE+RCE, load the companion [SCENARIOS.md](./SCENARIOS.md). ## 0. RELATED ROUTI
Install xxe-xml-external-entity
Run this in your OpenClaw agent to add xxe-xml-external-entity from the ClawHub registry.
openclaw skills install xxe-xml-external-entityRequires ClawHub registry access. Review the security analysis below before installing.
Security Analysis
Open Source
Code is publicly available for audit.
Community Verified
Reviewed by the ClawHub community.
Community Reviews
Real user ratings only — separate from the editorial assessment and ClawHub signal.
Installed this skill? Sign in and leave the first review.
Save the skill now, come back after testing it, and help the next person choose with a quick review.
Related skills
Frequently asked questions
Is xxe-xml-external-entity safe to install?
xxe-xml-external-entity has a SkillsReview security score of 85/100. It is open source and community-verified on ClawHub. Check the full Security Analysis on this page before installing.
How much does xxe-xml-external-entity cost?
xxe-xml-external-entity is free to install for OpenClaw via ClawHub.
What are the best alternatives to xxe-xml-external-entity?
You can compare xxe-xml-external-entity side by side with similar OpenClaw skills on the SkillsReview comparison page to find the best fit for your workflow.
How do I install xxe-xml-external-entity?
Install xxe-xml-external-entity from ClawHub at clawhub.ai/skills/xxe-xml-external-entity, or use the install action on this page to copy the command for your OpenClaw agent.
Community Signal
Historical movement
Timeline plus trend snapshots for security, reviews, and reputation tilt.
Trend Charts
30 / 90 / 180 day snapshots for ranking movement and security-score movement.
Last updated unknown UTC
Submit your review
Share your experience and help others find the best skills.
Newsletter
Stay updated on xxe-xml-external-entity and the wider SkillsReview ecosystem
Get the weekly Top 5, fresh security alerts, and newly hot skills by email. You can unsubscribe from any newsletter email in one click.