ato-chains
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The content is purely instructional, providing guidance on how to manually test for security vulnerabilities such as IDOR, password reset flaws, and OAuth misconfigurations.
- [NO_CODE]: Although the skill includes shell command examples using
curl, these are provided within markdown code blocks as reference material for the user. No code is executed by the skill or the agent. - [COMMAND_EXECUTION]: There is no evidence of the skill attempting to execute arbitrary system commands or subprocesses within the agent's environment.
- [DATA_EXFILTRATION]: The skill does not attempt to access sensitive files (e.g.,
.ssh,.env) or exfiltrate data to external servers. - [PROMPT_INJECTION]: The instructions do not contain attempts to override agent safety guidelines, bypass constraints, or extract system prompts.
Audit Metadata