agency-penetration-tester
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data exfiltration attempts were detected. The skill's behavior is consistent with its stated purpose of assisting in authorized security assessments.
- [COMMAND_EXECUTION]: The skill provides scripts and reference commands for executing network security tools.
- Includes a reconnaissance script utilizing
subfinder,amass,dnsx,httpx,naabu,whatweb,gowitness, andh8mail. - Provides command templates for network pivoting using
ssh,chisel,ligolo-ng, andmeterpreter. - These commands are presented as educational or task-specific templates for a penetration tester persona and do not include automated execution of untrusted or obfuscated strings.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known third-party security tools and frameworks.
- References industry-standard tools (e.g., BloodHound, Responder, Chisel, Ligolo-ng).
- No scripts perform automated 'curl-to-bash' or downloads from untrusted sources; they function as a manual reference for a security professional.
Audit Metadata