skills/damusix/skills/hurl/Gen Agent Trust Hub

hurl

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation provides installation commands for the Hurl tool via several well-known and trusted package managers and services, including Homebrew, APT, Cargo, and NPM. It also provides links to official GitHub releases for Debian packages. These references are standard for developer tooling.
  • [COMMAND_EXECUTION]: The skill instructs the agent on how to use the hurl and hurlfmt command-line interfaces. These tools are used for their intended purpose of making HTTP requests and asserting on the results in a testing context.
  • [DATA_EXFILTRATION]: The skill provides best practices for handling credentials using the --secret flag and redact keyword, which prevents sensitive information from appearing in logs and reports. No evidence of hardcoded credentials or unauthorized data access was found.
  • [SAFE]: A homoglyph detection was noted in references/captures-and-filters.md. Upon review, the Cyrillic characters used within a URL query string example to demonstrate the urlDecode filter's functionality are a legitimate use case for testing internationalization and not a malicious obfuscation attempt.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 08:25 AM
Security Audit — agent-trust-hub — hurl