recon-scope-triage
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a markdown code block demonstrating how to use
curlandcmpto detect 'soft-404' false positives. This is an educational example of how a human researcher would manually verify if a server returns the same response for a junk path as it does for a sensitive file. The commands are benign and use/tmpand$RANDOMsafely. - [PROMPT_INJECTION]: No prompt injection or safety bypass patterns were detected. The instructions are focused on adherence to scope and preventing accidental attacks on third parties.
- [DATA_EXFILTRATION]: No network exfiltration or sensitive data access patterns were found. The skill describes methodologies for analyzing existing datasets rather than creating new network connections or accessing local secrets.
- [EXTERNAL_DOWNLOADS]: No external packages or remote scripts are referenced or downloaded.
- [NO_CODE]: The skill is primarily documentation and methodology-based instructions without any integrated scripts or executable automation that would pose a runtime risk.
Audit Metadata