skills/mukul975/anthropic-cybersecurity-skills/exploiting-broken-function-level-authorization/Gen Agent Trust Hub
exploiting-broken-function-level-authorization
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSMETADATA_POISONING
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a standalone Python script (
scripts/agent.py) and code snippets inSKILL.mdthat facilitate API security testing through automated network requests. The script includes a functional testing suite that checks for privilege escalation by attempting to access administrative endpoints with low-privilege credentials. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to user-specified API targets to identify security flaws. These operations are core to the skill's purpose as an auditing tool and are conducted using the standard
requestslibrary. - [METADATA_POISONING]: There is an inconsistency between the author listed in the YAML frontmatter ('mahipal') and the copyright holder in the LICENSE file ('mukul975'). This is a minor metadata discrepancy that does not affect the safety or integrity of the skill's code.
Audit Metadata