api-mitmproxy
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous commands to install and operate the mitmproxy suite, including the interactive console, web interface, and command-line dump tool for traffic interception and analysis.
- [COMMAND_EXECUTION]: Python logic is executed via shell commands and through mitmproxy's scripting interface to automate security tests and manipulate API traffic, which is the primary intended function of the skill.
- [EXTERNAL_DOWNLOADS]: The CI configuration template includes steps to install several established security tools such as semgrep, safety, and checkov from standard package registries.
- [REMOTE_CODE_EXECUTION]: The ci-config-template.yml file contains a command to download and execute an installation script for tfsec from its official repository using a curl and bash pipe, which is a common installation pattern for this well-known security tool.
- [COMMAND_EXECUTION]: The skill instructs the user on modifying system configuration files like /etc/hosts and installing CA certificates, which are necessary steps for the legitimate interception of TLS-encrypted traffic during security testing.
Audit Metadata