hunt-api-misconfig
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing a structured methodology for identifying common API vulnerabilities like prototype pollution, OData bypasses, and Swagger exposure.
- [SAFE]: All code snippets provided (in JavaScript, Python, and shell) are examples of security testing payloads and do not represent executable code within the skill's own execution context.
- [SAFE]: No obfuscation, hidden URLs, or malicious persistence mechanisms were detected in the skill's content or metadata.
- [SAFE]: The external links point to reputable security research blogs, official vulnerability reports, and academic papers (e.g., HackerOne, arXiv, PortSwigger), all of which are documented neutrally.
Audit Metadata