hurl
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides installation commands for the Hurl tool via several well-known and trusted package managers and services, including Homebrew, APT, Cargo, and NPM. It also provides links to official GitHub releases for Debian packages. These references are standard for developer tooling.
- [COMMAND_EXECUTION]: The skill instructs the agent on how to use the
hurlandhurlfmtcommand-line interfaces. These tools are used for their intended purpose of making HTTP requests and asserting on the results in a testing context. - [DATA_EXFILTRATION]: The skill provides best practices for handling credentials using the
--secretflag andredactkeyword, which prevents sensitive information from appearing in logs and reports. No evidence of hardcoded credentials or unauthorized data access was found. - [SAFE]: A homoglyph detection was noted in
references/captures-and-filters.md. Upon review, the Cyrillic characters used within a URL query string example to demonstrate theurlDecodefilter's functionality are a legitimate use case for testing internationalization and not a malicious obfuscation attempt.
Audit Metadata