http-smuggling

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical guide for identifying HTTP Request Smuggling vulnerabilities, providing educational examples and templates for security research.- [EXTERNAL_DOWNLOADS]: The skill references cloning a security tool from a public repository on GitHub (github.com/defparam/smuggler), which is a common practice in security workflows and targets a well-known service.- [COMMAND_EXECUTION]: Includes standard command-line examples for security tools like curl, nuclei, and python3. These are presented as instructional snippets for the user to execute manually during a security audit.- [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. The network operations described are intended for testing the user-defined target server for vulnerabilities.- [PROMPT_INJECTION]: The instructions do not contain any attempts to bypass safety filters or override the agent's core operating instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 10:41 AM