skills/mukul975/anthropic-cybersecurity-skills/bypassing-authentication-with-forced-browsing/Gen Agent Trust Hub
bypassing-authentication-with-forced-browsing
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends downloading security wordlists from the well-known SecLists repository on GitHub for use in directory enumeration.\n- [COMMAND_EXECUTION]: Provides specific commands for running common security auditing tools such as
ffufandgobusterto identify hidden application paths.\n- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: The
scripts/agent.pyscript interacts with external web endpoints, ingesting HTTP response metadata such as status codes and content lengths.\n - Boundary markers: No specific boundary markers or 'ignore' instructions are used for the external data ingested during probing.\n
- Capability inventory: The skill utilizes the
requestslibrary to perform network probing and creates a local JSON file containing the discovered endpoints.\n - Sanitization: Probing logic relies on metadata evaluation (status codes and size) and does not parse or execute the response body content.
Audit Metadata