skills/masriyan/claude-code-cybersecurity-skill/Web Application Security Testing/Gen Agent Trust Hub
Web Application Security Testing
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides extensive methodologies and payload libraries for testing security vulnerabilities such as SQL Injection, Command Injection, and SSRF. These are consistent with the skill's stated purpose of security testing.
- [EXTERNAL_DOWNLOADS]: The skill requires standard Python dependencies (
requests,beautifulsoup4,urllib3,lxml) and recommends well-known security tools likeBurp Suite,sqlmap, andNiktofor professional assessments. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection attack surface by processing data from external web servers.
- Ingestion points: API responses and OpenAPI specifications are ingested in
scripts/api_security_tester.pyandscripts/owasp_scanner.py. - Boundary markers: There are no explicit boundary markers or instructions to isolate external data from the agent's internal reasoning.
- Capability inventory: The skill uses the
requestslibrary to perform network operations against user-specified targets. - Sanitization: No sanitization or validation of the content received from external web responses is performed before it is processed for reporting.
Audit Metadata