aegis-authn-session
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is an educational and functional resource for security professionals and AI agents performing security audits. Its contents are aligned with industry standards such as OWASP and CWE.
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard tools like curl, openssl, and ripgrep (rg). These commands are specifically designed to test for vulnerabilities in a target application's authentication and session management flows.
- [EXTERNAL_DOWNLOADS]: The skill references the api.pwnedpasswords.com API, which is a reputable service provided by Have I Been Pwned for checking credential compromise. This usage is transparent and serves a legitimate security purpose.
- [OBFUSCATION]: The Base64 encoded strings found in the skill are sample JWT components used for demonstrating how to test for alg:none and other token-based vulnerabilities. They are not used to conceal malicious payloads or hidden instructions.
- [DATA_EXFILTRATION]: While the skill involves network requests, these are directed at the application being audited (referred to as 'target') and do not attempt to exfiltrate sensitive data from the local agent environment.
Audit Metadata