asset-discovery
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate security reconnaissance workflows using established open-source tools such as
httpx,dnsx, andnmap. The workflow follows standard industry practices for identifying live web applications and services.- [COMMAND_EXECUTION]: The skill utilizes shell commands to orchestrate security tools. These commands operate on local files and standard network protocols to identify live assets. The execution is scoped to the tools mentioned and their intended use cases.- [EXTERNAL_DOWNLOADS]: Documents the installation ofgowitnessfrom its official GitHub repository (github.com/sensepost/gowitness). This is a standard procedure for setting up this utility and originates from a well-known service.- [PROMPT_INJECTION]: The skill ingests data from external web services, such as HTTP titles, headers, and technology fingerprints. While this presents a surface for indirect prompt injection, the ingested data is processed using static command-line filters likejq,awk, andgrep, and no instructions were found that attempt to override the agent's behavior.
Audit Metadata