hunt-brute-force

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides functional bash scripts that utilize standard security tools like curl, ffuf, hydra, and nuclei to perform network-based security assessments. These commands are necessary for the skill's intended auditing functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes logic to analyze HTTP response bodies and headers from target servers. It uses shell utilities to detect differences in status codes and timings. While this involves processing untrusted data from external targets, it is performed in a controlled manner for analysis without evidence of malicious instructions.
  • [METADATA_POISONING]: A minor inconsistency exists between the frontmatter metadata (report_count: 6) and the skill's body text which mentions a count of 0. This appears to be a documentation artifact and does not pose a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 05:47 PM