intercepting-mobile-traffic-with-burpsuite

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill follows standard security auditing practices for mobile applications and uses recognized tools like Burp Suite and Frida.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (HAR and XML traffic logs) via specialized analysis scripts.\n
  • Ingestion points: scripts/agent.py (HAR files) and scripts/process.py (Burp Suite XML exports).\n
  • Boundary markers: Absent; data is parsed structurally.\n
  • Capability inventory: File system access for reading logs and writing JSON reports; no network or remote code execution capabilities are present in the provided scripts.\n
  • Sanitization: Scripts utilize regular expressions and structural parsing (JSON/XML) to identify patterns, minimizing the risk of data being interpreted as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 07:35 AM
Security Audit — agent-trust-hub — intercepting-mobile-traffic-with-burpsuite