web2-recon
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a large number of shell commands and pipes to automate the execution of various security tools for subdomain enumeration, host discovery, and vulnerability scanning.- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of Python packages such as
trufflehog3,git-dumper, andds-storeviapip/pipx, and fetches data from external sources including GitHub, ProjectDiscovery (Chaos API), and crt.sh.- [PERSISTENCE]: The skill provides shell scripts for continuous monitoring and suggests scheduling them usingcronto alert the user of new subdomains or GitHub commits.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted data from external targets, such as subdomain lists, URL parameters, and the content of JavaScript files, which are then parsed by shell tools.\n - Ingestion points: Target asset lists from APIs, crawled URLs, and source code recovered from target repositories.\n
- Boundary markers: No specific delimiters or warnings are used to separate untrusted external content within the processing pipeline.\n
- Capability inventory: Includes network operations (
curl,wget), file system modification, and execution of local scripts and binaries.\n - Sanitization: The skill relies on standard text processing utilities (
jq,grep,sed) to handle external data.- [DYNAMIC_EXECUTION]: The skill dynamically generates configuration files and monitoring scripts using shell redirection and templates.
Audit Metadata