web-assessment-executor
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of instructional Markdown text defining a web security testing methodology. No executable code, shell commands, or external dependencies are included.
- [NO_CODE]: No scripts or binary files are provided with this skill.
- [SAFE]: No sensitive data exfiltration or credential harvesting patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for interacting with external web targets. While this presents an attack surface for indirect prompt injection from target responses, the instructions focus on structured testing and evidence collection. Ingestion points: The agent processes the target URL and test cases provided at runtime. Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are defined for target responses. Capability inventory: Agent capabilities are limited to browser automation and HTTP tooling for payload execution. Sanitization: No specific sanitization or escaping steps are mandated for external content. This surface is considered a known operational risk for security assessment tools rather than a malicious feature.
Audit Metadata