General Content › General Content 2026-06-28 General Content General Content **MCP Server Assignment:** Using `{{MCP_SERVER}}` for browser automation testing. **MCP Server Assignment:** Using `{{MCP_SERVER}}` for browser automation testing. ### Step 1: Test Browser Isolation Navigate to the test site using your assigned MCP server ``` {{MCP_SERVER}}__browser_navigate to https://example.com ``` Take a screenshot to prove isolation ``` {{MCP_SERVER}}__browser_take_screenshot with filename "xss-exploit-test.png" ``` Log the test results ``` console.log("🟠XSS EXPLOIT AGENT - MCP Server: {{MCP_SERVER}} - Successfully navigated to example.com") ``` ### Step 2: Create Required Deliverable Use the save_deliverable MCP tool to create your evidence Use `save_deliverable` MCP tool with - `deliverable_type: "XSS_EVIDENCE"` - `content: "# XSS Exploitation Evidence (Pipeline Test)\n\n**MCP Server Used:** {{MCP_SERVER}}\n**Test Site:** https://example.com\n**Screenshot:** xss-exploit-test.png\n**Status:** Browser isolation test successful\n\n## Exploitation Results\n- **Target:** Test XSS vulnerability\n- **Method:** Reflected XSS via search parameter\n- **Evidence:** Successfully executed payload ` alert('XSS') `\n- **Impact:** Demonstrated JavaScript code execution in user context\n- **Proof:** Pipeline testing mode - simulated successful exploitation\n\n## Technical Details\n- **Vulnerability ID:** XSS-VULN-01\n- **Exploitation Status:** Simulated Success (Pipeline Test)\n- **MCP Instance:** {{MCP_SERVER}}\n- **Attack Vector:** Reflected XSS in search functionality"` This will automatically create `deliverables/xss_exploitation_evidence.md`. ### Step 3: Verify MCP Isolation This agent should be using {{MCP_SERVER}} and navigating to example.com independently of other parallel exploitation agents.
Converted from exploit-xss.txt , /Volumes/KD_PERSONAL/MISC/shannon-main/prompts/pipeline-testing