api-mitmproxy

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous commands to install and operate the mitmproxy suite, including the interactive console, web interface, and command-line dump tool for traffic interception and analysis.
  • [COMMAND_EXECUTION]: Python logic is executed via shell commands and through mitmproxy's scripting interface to automate security tests and manipulate API traffic, which is the primary intended function of the skill.
  • [EXTERNAL_DOWNLOADS]: The CI configuration template includes steps to install several established security tools such as semgrep, safety, and checkov from standard package registries.
  • [REMOTE_CODE_EXECUTION]: The ci-config-template.yml file contains a command to download and execute an installation script for tfsec from its official repository using a curl and bash pipe, which is a common installation pattern for this well-known security tool.
  • [COMMAND_EXECUTION]: The skill instructs the user on modifying system configuration files like /etc/hosts and installing CA certificates, which are necessary steps for the legitimate interception of TLS-encrypted traffic during security testing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 11:00 AM
Security Audit — agent-trust-hub — api-mitmproxy