{"id":"94997340-9778-442f-825f-36f2bf128efd","entityType":"agent","slug":"crawl-917186af7434954d404e-010bc294ec702742f438","name":"Crawled rfc-editor.org 010bc294","canonicalUrl":"https://www.xpersona.co/agent/crawl-917186af7434954d404e-010bc294ec702742f438","canonicalPath":"/agent/crawl-917186af7434954d404e-010bc294ec702742f438","generatedAt":"2026-10-10T03:19:11.459Z","source":"GITHUB_REPOS","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"editorial-content","verified":true,"confidence":"high","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":null},"description":"irect_to%3Dhttps%3A%2F%2Fattacker.example%2Fcb #access_token=2YotnFZFEjr1zCsicMWpAA&... ¶ At client.somesite.example, the request arrives at the open redirector. The endpoint will read the redirect parameter and will... irect_to%3Dhttps%3A%2F%2Fattacker.example%2Fcb #access_token=2YotnFZFEjr1zCsicMWpAA&... ¶ At client.somesite.example, the request arrives at the open redirector. The endpoint will read the redirect parameter and will issue an HTTP 303 Location header redirect to the URL https://attacker.example/ . ¶ HTTP/1.1 303 See Other Location: https://attacker.example/ ¶ Since the redirector at client.somesite.example does not i","descriptionLabel":"Technical summary","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. Last updated 4/14/2026.","installCommand":null,"sourceUrl":"https://rfc-editor.org/rfc/rfc9700","homepage":"https://rfc-editor.org/rfc/rfc9700","primaryLinks":[{"label":"View Source","url":"https://rfc-editor.org/rfc/rfc9700","kind":"source"}],"safetyScore":84,"overallRank":77.2,"popularityScore":67,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"irect_to%3Dhttps%3A%2F%2Fattacker.example%2Fcb #access_token=2YotnFZFEjr1zCsicMWpAA&... ¶ At client.somesite.example, the request arrives at the open redirector"},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":"No protocol or capability metadata is available."},"protocols":[],"capabilities":[],"verifiedCount":0,"selfDeclaredCount":0,"capabilityMatrix":{"rows":[],"flattenedTokens":""}},"adoption":{"evidence":{"source":"no-adoption-signals","verified":false,"confidence":"low","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":"No source adoption metrics were available."},"stars":null,"forks":null,"downloads":null,"packageName":null,"latestVersion":null,"tractionLabel":null},"release":{"evidence":{"source":"agent-index","verified":false,"confidence":"medium","updatedAt":"2026-03-14T02:00:15.471Z","emptyReason":null},"lastUpdatedAt":"2026-04-14T23:26:25.608Z","lastCrawledAt":"2026-03-14T02:00:15.471Z","lastIndexedAt":"2026-03-14T02:00:15.471Z","nextCrawlAt":null,"lastVerifiedAt":null,"highlights":[]},"execution":{"evidence":{"source":"GITHUB REPOS","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":null,"setupComplexity":"medium","setupSteps":["Setup complexity is MEDIUM. Standard integration tests and API key provisioning are required before connecting this to production workloads.","Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":[]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"GITHUB_REPOS","generatedAt":"2026-10-10T03:19:11.459Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/crawl-917186af7434954d404e-010bc294ec702742f438/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"GITHUB REPOS","verified":false,"confidence":"high","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":null},"readme":"irect_to%3Dhttps%3A%2F%2Fattacker.example%2Fcb #access_token=2YotnFZFEjr1zCsicMWpAA&... ¶ At client.somesite.example, the request arrives at the open redirector. The endpoint will read the redirect parameter and will issue an HTTP 303 Location header redirect to the URL https://attacker.example/ . ¶ HTTP/1.1 303 See Other Location: https://attacker.example/ ¶ Since the redirector at client.somesite.example does not include a fragment in the Location header, the user agent will reattach the original fragment #access_token=2YotnFZFEjr1zCsicMWpAA&... to the URL and will navigate to the following URL: ¶ https://attacker.example/#access_token=2YotnFZFEjr1z... ¶ The attacker's page at attacker.example can then access the fragment and obtain the access token. ¶ 4.1.3. Countermeasures The complexity of implementing and managing pattern matching correctly obviously causes security issues. Thi","readmeExcerpt":"irect_to%3Dhttps%3A%2F%2Fattacker.example%2Fcb #access_token=2YotnFZFEjr1zCsicMWpAA&... ¶ At client.somesite.example, the request arrives at the open redirector. The endpoint will read the redirect parameter and will issue an HTTP 303 Location header redirect to the URL https://attacker.example/ . ¶ HTTP/1.1 303 See Other Location: https://attacker.example/ ¶ Since the redirector at client.somesite.example does not i","codeSnippets":[],"executableExamples":[],"parameters":null,"dependencies":[],"permissions":[],"extractedFiles":[],"languages":[],"docsSourceLabel":"GITHUB REPOS","editorialOverview":"irect_to%3Dhttps%3A%2F%2Fattacker.example%2Fcb #access_token=2YotnFZFEjr1zCsicMWpAA&... ¶ At client.somesite.example, the request arrives at the open redirector. The endpoint will read the redirect parameter and will... irect_to%3Dhttps%3A%2F%2Fattacker.example%2Fcb #access_token=2YotnFZFEjr1zCsicMWpAA&... ¶ At client.somesite.example, the request arrives at the open redirector. The endpoint will read the redirect parameter and will issue an HTTP 303 Location header redirect to the URL https://attacker.example/ . ¶ HTTP/1.1 303 See Other Location: https://attacker.example/ ¶ Since the redirector at client.somesite.example does not i","editorialQuality":{"score":100,"threshold":65,"status":"ready","wordCount":434,"uniquenessScore":58,"reasons":[]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"agent-directory","verified":false,"confidence":"low","updatedAt":"2026-10-10T03:19:11.459Z","emptyReason":"No close protocol neighbors were found."},"items":[],"links":{"hub":"/agent","source":"/agent/source/github_repos","protocols":[]}}}