hunt-laravel
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the
laravel-ignition-rcediagnostic tool from a public GitHub repository to test for CVE-2021-3129. This is a legitimate security research utility aligned with the skill's purpose. - [COMMAND_EXECUTION]: Uses various shell commands (curl, grep, and php) to interact with a user-provided
$TARGET. These commands facilitate vulnerability assessments such as checking for exposed.envfiles and dashboard access. - [SAFE]: Analysis of the automated alerts for 'Remote code piped to python3' confirms they are false positives. The skill uses
python3 -m json.toolspecifically to pretty-print JSON data returned from target API endpoints, which is a standard and safe data processing practice.
Audit Metadata