brightdata-proxy

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides a shell script (scripts/smoke_test.sh) designed to verify proxy credentials. The script uses curl to perform an HTTP request to a Bright Data diagnostic endpoint (geo.brdtest.com) and parse the results. This script is a legitimate developer tool for the service and does not involve downloading or executing arbitrary code from untrusted sources.
  • [EXTERNAL_DOWNLOADS]: All external URLs and domains referenced in the skill (brightdata.com, brd.superproxy.io, brdtest.com) are official resources owned by the vendor. These references are used for documentation, proxy routing, and connectivity diagnostics, which are safe and expected behaviors for a service integration skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles user-provided data such as customer IDs and zone credentials to generate configuration code. This represents a standard use case for technical skills and does not involve processing untrusted third-party data that could lead to unintended command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:45 PM
Security Audit — agent-trust-hub — brightdata-proxy