hunt-agent-crypto
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a self-contained Python script ('Runnable Probe') designed to be executed to test cryptographic vulnerabilities.
- [DYNAMIC_EXECUTION]: The provided Python script uses the 'urllib.request' library to perform network operations, interacting with external endpoints to analyze encryption and decryption behavior.
- [DATA_EXFILTRATION]: The script makes POST requests to external domains ('https://target/agent/encrypt' and 'https://target/agent/decrypt') which are not on the standard whitelist. While these are placeholders, they represent a network exfiltration vector if modified.
Audit Metadata