skills/jeremylongshore/tons-of-skills-marketplace/probing-dangerous-http-methods/Gen Agent Trust Hub
probing-dangerous-http-methods
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is authored by a trusted vendor (Jeremy Longshore) and its behavior is strictly consistent with its documentation as a penetration testing utility.
- [COMMAND_EXECUTION]: The skill executes its own local Python script (
scripts/probe_methods.py) to perform network probes. This is a legitimate and expected use of command execution for this type of security tool. - [INDIRECT_PROMPT_INJECTION]: The tool processes HTTP response content from external servers during audits. While this introduces a potential attack surface for indirect injection if a target server echoes malicious instructions, the risk is minimized by the tool's focus on structured status codes and headers, and it is a necessary part of the skill's primary auditing function.
Audit Metadata