hunt-ato

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION

Full Analysis

[COMMAND_EXECUTION]: The skill provides numerous command-line examples intended for security testing, including curl for verifying Host-header injection, ffuf for brute-forcing reset tokens and security questions, and dig for identifying dangling subdomains in OAuth testing.
[DYNAMIC_EXECUTION]: Includes a Python one-liner in Path 6 used to encode and sign JWT tokens with specific algorithms (like 'none') or claims to facilitate the testing of authentication logic.

Audit Metadata

Risk Level

SAFE

Analyzed

Nov 12, 2026, 05:47 PM