hunt-http-smuggling
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-level educational content about HTTP Request Smuggling (CL.TE, TE.CL, H2.CL, H2.TE) and methodologies for manual detection using established tools like Burp Suite.\n- [SAFE]: No automated tools or malicious payloads are included. The code snippets provided are standard HTTP request templates used for manual vulnerability probing during authorized security audits.\n- [SAFE]: The documentation references external security research (PortSwigger) and provides a target suitability matrix based on RFC compliance of common web servers (Nginx, Caddy, etc.), which is standard practice in security analysis.\n- [SAFE]: The
curlcommand provided is a benign fingerprinting check (curl -sI) used to identify server headers and does not perform any data exfiltration or unauthorized access.
Audit Metadata