exploiting-broken-link-hijacking
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The SKILL.md file documents the use of standard security utilities including
dig,whois,curl, andaws-cli. These tools are used as intended for performing DNS reconnaissance, checking domain registration status, and auditing cloud bucket availability. - [INDIRECT_PROMPT_INJECTION]: The
agent.pyscript fetches and parses HTML content from user-specified target URLs to extract external links. While this exposes a surface for processing untrusted data, the skill is classified as safe because the script only uses these links for secondary HTTP HEAD status checks and does not execute the extracted content or include it in sensitive prompt templates. - [EXTERNAL_DOWNLOADS]: The workflow documentation suggests running
broken-link-checkervianpx, which is a common method for executing well-known Node.js security utilities. Other tools likesubjackandnucleiare also mentioned; these are established industry-standard tools for subdomain takeover detection.
Audit Metadata