Skills
skills/aradotso/security-skills/web-security-scanner-pro/Gen Agent Trust Hub

web-security-scanner-pro

Warn

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the tool's source code from a non-vetted external GitHub repository.
  • Evidence: git clone https://github.com/miladrezanezhad/web-security-scanner-pro.git in SKILL.md.
  • [REMOTE_CODE_EXECUTION]: The installation process involves executing code that was downloaded from an external source.
  • Evidence: The skill instructs the user to run the tool using python main.py after cloning the repository.
  • [COMMAND_EXECUTION]: The skill relies on executing shell commands to perform security scans and manage the tool.
  • Evidence: Multiple instances of python main.py scan with various arguments in SKILL.md.
  • [PROMPT_INJECTION]: The skill processes untrusted content from scanned websites, creating a surface for indirect prompt injection attacks.
  • Ingestion points: Data enters the agent's context through self.browser.get(target) and response.text in SKILL.md.
  • Boundary markers: No delimiters or instructions to ignore embedded commands are present in the provided documentation.
  • Capability inventory: The skill can perform network operations via requests and execute CLI commands using python main.py.
  • Sanitization: There is no evidence of sanitization or validation of the ingested external content before processing.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 12, 2026, 08:51 PM
Security Audit — agent-trust-hub — web-security-scanner-pro