asset-discovery

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate security reconnaissance workflows using established open-source tools such as httpx, dnsx, and nmap. The workflow follows standard industry practices for identifying live web applications and services.- [COMMAND_EXECUTION]: The skill utilizes shell commands to orchestrate security tools. These commands operate on local files and standard network protocols to identify live assets. The execution is scoped to the tools mentioned and their intended use cases.- [EXTERNAL_DOWNLOADS]: Documents the installation of gowitness from its official GitHub repository (github.com/sensepost/gowitness). This is a standard procedure for setting up this utility and originates from a well-known service.- [PROMPT_INJECTION]: The skill ingests data from external web services, such as HTTP titles, headers, and technology fingerprints. While this presents a surface for indirect prompt injection, the ingested data is processed using static command-line filters like jq, awk, and grep, and no instructions were found that attempt to override the agent's behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 10:41 AM