hunt-host-header
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains several
curlcommand templates and abashloop for header fuzzing. These commands are intended for security testing purposes and are documented as manual steps for the researcher to execute against target infrastructure they are authorized to test. The commands do not contain malicious payloads or attempts to exfiltrate data from the local environment. - [SAFE]: The content is educational and methodology-focused. It explicitly instructs the user to 'Always test against your own registered test account' and 'Never request another user's reset,' promoting ethical security research practices. The techniques described (e.g., password reset poisoning, cache poisoning) are well-known industry research from sources like PortSwigger and James Kettle.
Audit Metadata