security-bounty-hunter
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides procedural guidance for security research. It outlines a manual and tool-assisted workflow for identifying vulnerabilities like SSRF, SQL injection, and command injection. No malicious code, exfiltration patterns, or obfuscated content were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a process for analyzing external codebases, which represents a potential injection surface.
- Ingestion points: Source code from external repositories entered into the agent context.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are provided.
- Capability inventory: The skill references external tools like semgrep but does not include commands for automatic execution.
- Sanitization: No explicit sanitization or validation of analyzed source code is defined.
Audit Metadata