hunt-auth-bypass
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell command templates using curl to probe web endpoints and test authentication mechanisms such as xmlrpc.php.
- [DYNAMIC_EXECUTION]: The skill provides Python code snippets for manipulating SAML assertions and generating JWT payloads with the 'none' algorithm, intended for security testing purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze untrusted data from external sources such as web responses, JavaScript files, and SAML payloads.
- Ingestion points: Web responses and captured SAML assertions from target domains (SKILL.md).
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined for the captured data.
- Capability inventory: The skill uses curl for external communication and includes Python logic for processing security tokens (SKILL.md).
- Sanitization: No explicit sanitization or filtering is described for the content of the captured external data.
Audit Metadata