http-testing
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Employs the
curlandjqsystem binaries to perform HTTP requests and process JSON data as defined in the steps section ofSKILL.md.\n- [DATA_EXFILTRATION]: Initiates outbound network connections to external endpoints viacurlto fulfill its primary purpose of API testing and debugging.\n- [PROMPT_INJECTION]: Exhibits vulnerability to indirect prompt injection if an external API response contains malicious instructions. \n - Ingestion points: External content retrieved via
curlrequests inSKILL.md.\n - Boundary markers: Absent; response data is returned to the agent without delimiters or safety warnings.\n
- Capability inventory: Includes network access (
curl) and data processing (jq).\n - Sanitization: Absent; no validation or escaping is applied to the retrieved HTTP responses before they enter the agent context.
Audit Metadata