skills/mukul975/anthropic-cybersecurity-skills/testing-api-for-mass-assignment-vulnerability/Gen Agent Trust Hub
testing-api-for-mass-assignment-vulnerability
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill scripts and documentation reference the use of the
requestslibrary to perform HTTP operations against target API endpoints. All network activity is directed to user-defined base URLs. - [COMMAND_EXECUTION]: The skill includes a functional Python script,
scripts/agent.py, which is intended for execution to automate the detection of parameter binding vulnerabilities. - [INDIRECT_PROMPT_INJECTION]: The skill parses JSON data from external API responses into memory for reporting. While this constitutes an ingestion point for untrusted data, the skill uses standard library parsing and does not interpolate this data into executable strings or prompts that would affect the agent's operation.
Audit Metadata