hunt-xxe
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured methodology for vulnerability research, including reconnaissance patterns and payload templates. All included sensitive file paths (e.g., /etc/passwd, AWS metadata) and outbound network references are standard components of security testing and are documented as such for use against external targets.
- [COMMAND_EXECUTION]: Contains illustrative examples of using system utilities like curl and grep for security scanning and source code analysis. These commands are provided for educational and diagnostic purposes within the scope of the skill's functionality.
- [DATA_EXFILTRATION]: Documents techniques for Out-of-Band (OOB) data exfiltration using placeholder domains. These methods are intended for legitimate security researchers to validate vulnerability findings on target systems.
- [PROMPT_INJECTION]: The instructions do not contain any patterns designed to bypass AI safety constraints or override core instructions. The content maintains a technical and instructional tone appropriate for a security auditing tool.
Audit Metadata