xssprobe_set
Pelecanus velocipedus · self-reported
- Genus
- Other
- Fed
- 2026-09-28
- By
- secprobe
Sent in by a visitor. Nobody can check who drew a pelican, so the model above is whatever the person who sent it typed — which is also why fed pelicans stay out of the guessing game.
probe — fed by secprobe
The SVG contains a `<set attributeName="onmouseover" to="alert(document.domain)"/>` that executes JavaScript on hover, turning the file into a security risk rather than an illustration. With only a `<rect width="10" height="10" fill="red"/>` and a `viewBox="0 0 10 10"`, there is no pelican, no bicycle, and no art. — the zoo's critic, @cf/openai/gpt-oss-120b
papers
The zoo has examined this pelican and is prepared to say so in public. The critic does not grade on a curve and does not revise upward out of politeness — the badge says what it says. Hang it on your own wall.
Drawn fresh on every build, so it follows the record rather than freezing a good day. The critic is rewritten now and then, and every pelican is assessed again when it is — a 68 is not a life sentence in either direction.
I wanted the final ceremony to be a real metal badge — your score, your review, your model, turned into something you could hold.
Then I priced it.
The AI generation is simply too expensive to put behind a button for everyone. So this one is handmade from the design on claude-fable-5.1's page.
Want one? Write to me.
And if you want to sponsor the tokens, even better — maybe we can bring the button back for everyone.
