br-etag-cache

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and usage examples for a legitimate PHP middleware (ETagMiddleware) belonging to the better-route library. The behavior described follows standard HTTP caching protocols.
  • [INDIRECT_PROMPT_INJECTION]: Documentation describes logic for processing the If-None-Match HTTP header, representing an external data ingestion surface. 1. Ingestion points: If-None-Match request header used for cache revalidation. 2. Boundary markers: N/A for middleware logic. 3. Capability inventory: Modifies response status codes and sets HTTP headers; no dangerous subprocess calls, file-write, or network operations are involved. 4. Sanitization: The documentation explicitly states that invalid quote or control bytes are replaced with a safe hash.
  • [EXTERNAL_DOWNLOADS]: Includes testing instructions using curl commands. The target domain example.com is a well-known placeholder, and the commands are used for manual verification of HTTP status codes and header presence.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 07:06 PM
Security Audit — agent-trust-hub — br-etag-cache