agency-penetration-tester

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or unauthorized data exfiltration attempts were detected. The skill's behavior is consistent with its stated purpose of assisting in authorized security assessments.
  • [COMMAND_EXECUTION]: The skill provides scripts and reference commands for executing network security tools.
  • Includes a reconnaissance script utilizing subfinder, amass, dnsx, httpx, naabu, whatweb, gowitness, and h8mail.
  • Provides command templates for network pivoting using ssh, chisel, ligolo-ng, and meterpreter.
  • These commands are presented as educational or task-specific templates for a penetration tester persona and do not include automated execution of untrusted or obfuscated strings.
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known third-party security tools and frameworks.
  • References industry-standard tools (e.g., BloodHound, Responder, Chisel, Ligolo-ng).
  • No scripts perform automated 'curl-to-bash' or downloads from untrusted sources; they function as a manual reference for a security professional.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 02:37 AM