hunt-csrf

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is a legitimate security research and testing resource focused on CSRF hunting. It follows standard security auditing practices by providing methodologies, common root causes, and payload templates.
  • [COMMAND_EXECUTION]: The skill provides numerous curl and grep command examples for auditing web application security posture. These commands are intended for use by a security professional or an autonomous agent performing security testing and involve standard network operations and text processing.
  • [DATA_EXPOSURE]: The examples use non-functional placeholder values (e.g., YOUR_SESSION, oauth_token_here, SESSION_A) for sensitive tokens and cookies, which is a safe practice for documentation and templates.
  • [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override AI behavior, bypass safety filters, or extract system prompts. The language is purely instructional and technical.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 06:48 AM