File Path Traversal Testing
Fail
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: HIGHCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains numerous pre-crafted command-line examples for launching web attacks using tools such as curl, ffuf, and wfuzz.
- [DATA_EXFILTRATION]: The documentation provides paths to highly sensitive system files including /etc/shadow, SSH private keys (/root/.ssh/id_rsa), and process environment variables (/proc/self/environ) which are primary targets for data exfiltration.
- [REMOTE_CODE_EXECUTION]: The skill explicitly teaches how to achieve arbitrary code execution by exploiting LFI vulnerabilities via log poisoning and the use of dangerous PHP wrappers such as php://input and expect://.
Recommendations
- AI detected serious security threats
Audit Metadata