hunt-host-header

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill contains several curl command templates and a bash loop for header fuzzing. These commands are intended for security testing purposes and are documented as manual steps for the researcher to execute against target infrastructure they are authorized to test. The commands do not contain malicious payloads or attempts to exfiltrate data from the local environment.
  • [SAFE]: The content is educational and methodology-focused. It explicitly instructs the user to 'Always test against your own registered test account' and 'Never request another user's reset,' promoting ethical security research practices. The techniques described (e.g., password reset poisoning, cache poisoning) are well-known industry research from sources like PortSwigger and James Kettle.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 05:47 PM