awesome-pentest-tools-catalog
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill contains numerous examples of shell commands and Python scripts using the
subprocessmodule to interact with security tools (e.g., Nmap, Nuclei, Masscan). These are documented for their intended purpose in security testing and use standard parameters. - [EXTERNAL_DOWNLOADS]: The documentation references various well-known security tools and repositories, including standard Go and Python package installation commands (
pip install,go install). These target official registries or well-known open-source projects (e.g., ProjectDiscovery, Metasploit). - [CREDENTIALS_UNSAFE]: The skill uses safe patterns for credential management in its examples, such as referencing environment variables (
$FRP_TOKEN,$NPS_VKEY) and placeholders (your-api-token-here). No hardcoded secrets or sensitive credentials were found. - [DATA_EXFILTRATION]: No patterns of unauthorized data harvesting or exfiltration were identified. Network operations within the code snippets are restricted to the documented scanning and tunneling functions of the referenced security tools.
Audit Metadata