Skills
Navigate
skills/gsfsss/claude-bughunter/offensive-osint/Gen Agent Trust Hub

offensive-osint

Fail

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONMETADATA_POISONING
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/dashboard.py script executes the bundled scripts/h1_reference.py script using subprocess.run to query HackerOne disclosures.
  • [EXTERNAL_DOWNLOADS]: The references/tooling-install.md file contains numerous commands for downloading and installing external software from various sources such as GitHub and package registries.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from target applications and provides 'attack-path hint' templates that may influence agent behavior based on that data.
  • [PRIVILEGE_ESCALATION]: The skill's documentation includes commands that suggest using sudo for installing system-level utilities and tools.
  • [METADATA_POISONING]: There is a discrepancy between the author identified in the skill metadata (gsfsss) and the author/repository mentioned in the scripts/dashboard.py code (elementalsouls), which may indicate inconsistent or deceptive source information.
Recommendations
  • CRITICAL: 2 file(s) identified as malware by FileRep - DO NOT USE
  • Contains 5 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 12, 2026, 05:47 PM