360 Secure SkillHub
360 安全技能中心

inline-asset-probe

该 Skill 是一个 PowerShell 脚本工具：调用 curl 或 wget 抓取指定 URL，扫描 HTML/CSS 中的内联 data:*;base64 资源并按 MIME 后缀保存为文件；可选保存原始响应，并对响应内容做尽力而为的 base64 解码，适合快速检查页面内嵌资源。

yibeiqingtian-ai
yibeiqingtian-ai
热度 45.25
最近更新 2026-05-11 17:33:24
分类：效率依赖：代码执行 / 读写文件应用场景：数据处理 / 自动化脚本 / 文件转换

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add inline-asset-probe
Metadata
name
inline-asset-probe
version
0.1.0
description
Fetch a URL with curl/wget, extract inline base64 data URIs, and best-effort decode any content to inspect embedded assets.

Inline Asset Probe

Practical utility for quickly extracting inline assets from HTML or CSS and inspecting base64-encoded payloads.

What It Does

  • Fetches a target URL using curl or wget
  • Scans for inline data:*;base64, assets and saves them as files
  • Optionally base64-decodes the entire response as a best-effort probe

Usage

PowerShell:

powershell -ExecutionPolicy Bypass -File run.ps1.txt -Url https://example.com

Save raw response and decode any content:

powershell -ExecutionPolicy Bypass -File run.ps1.txt -Url https://example.com -SaveResponse -DecodeResponse

Limit extracted assets and choose output directory:

powershell -ExecutionPolicy Bypass -File run.ps1.txt -Url https://example.com -OutDir probe_out -MaxAssets 20

Output

  • probe_out/response.bin when -SaveResponse
  • probe_out/assets/asset_*.ext for extracted inline assets
  • probe_out/decoded.bin when -DecodeResponse

Notes

  • -DecodeResponse performs a best-effort base64 decode of any content by stripping non-base64 characters and padding to a 4-byte boundary.
  • Works best for HTML/CSS pages with inline data URIs.