703-technologies-fuzzing-testing
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security best practices for local tool execution. It explicitly forbids remote script downloads, instead requiring the user to provide a verified local JAR file (
cats/cats.jar) and using a local Dockerfile to containerize execution. - [SAFE]: Mandatory safety gates are included, such as requiring successful project compilation (
./mvnw compile) before any fuzzing logic is applied, preventing execution on unstable or potentially compromised build states. - [SAFE]: The execution script (
run-cats-fuzz.sh) follows the principle of least privilege by using Docker flags like--cap-drop ALL,--security-opt no-new-privileges, and--read-onlyfor reachability checks. - [SAFE]: Input validation is enforced by requiring user confirmation for OpenAPI contract paths and verifying file existence on disk before the tool runs.
Audit Metadata