harden-tool-url-inputs
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- Security Hardening Focus: The skill is explicitly designed to improve security by identifying and fixing potential SSRF (Server-Side Request Forgery) and URL hijacking vulnerabilities in tool directories.
- Input Validation: It emphasizes treating all external inputs as untrusted and provides a structured approach to validating URLs before they are used in network operations, using an allow-list-based validation helper.
- Scoped Operations: The skill includes instructions to limit its actions to specific directories and validates paths to ensure they stay within the intended repository boundaries, preventing accidental modification of unrelated files.
- Standard Development Workflow: It utilizes standard build and test tools such as dotnet build and git status as part of its verification workflow to ensure that security fixes do not break existing functionality.
Audit Metadata