hunt-csrf
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a legitimate security research and testing resource focused on CSRF hunting. It follows standard security auditing practices by providing methodologies, common root causes, and payload templates.
- [COMMAND_EXECUTION]: The skill provides numerous
curlandgrepcommand examples for auditing web application security posture. These commands are intended for use by a security professional or an autonomous agent performing security testing and involve standard network operations and text processing. - [DATA_EXPOSURE]: The examples use non-functional placeholder values (e.g.,
YOUR_SESSION,oauth_token_here,SESSION_A) for sensitive tokens and cookies, which is a safe practice for documentation and templates. - [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override AI behavior, bypass safety filters, or extract system prompts. The language is purely instructional and technical.
Audit Metadata