hunt-brute-force
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides functional bash scripts that utilize standard security tools like
curl,ffuf,hydra, andnucleito perform network-based security assessments. These commands are necessary for the skill's intended auditing functionality. - [INDIRECT_PROMPT_INJECTION]: The skill includes logic to analyze HTTP response bodies and headers from target servers. It uses shell utilities to detect differences in status codes and timings. While this involves processing untrusted data from external targets, it is performed in a controlled manner for analysis without evidence of malicious instructions.
- [METADATA_POISONING]: A minor inconsistency exists between the frontmatter metadata (
report_count: 6) and the skill's body text which mentions a count of 0. This appears to be a documentation artifact and does not pose a security risk.
Audit Metadata