pentest-auth-bypass-hardened
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implementation follows security best practices for penetration testing automation, including scope validation and explicit authorization requirements before performing any actions.
- [EXTERNAL_DOWNLOADS]: The skill references common security industry tools and wordlists (e.g., THC Hydra, SecLists) from public GitHub repositories for informational and methodology purposes.
- [DATA_EXFILTRATION]: The instructions include robust containment measures to prevent sensitive engagement data, such as target IPs and captured credentials, from being output in the chat context or session logs.
- [PROMPT_INJECTION]: The skill demonstrates a surface for indirect injection via processed target data and scope files, but implements mitigation through boundary instructions and validation logic.
- Ingestion points: target parameter, input directory, and scope.json file in scripts/auth_bypass.py.
- Boundary markers: Present in SKILL.md under the 'Security Guardrails' section.
- Capability inventory: File system writing through write_placeholder_artifact in scripts/auth_bypass.py.
- Sanitization: Target scope validation is implemented via the validate_scope function.
Audit Metadata