hunt-misc
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes numerous instructions to execute shell commands using
curl,grep, anddigfor performing network reconnaissance, probing API endpoints, and verifying DNS records. - [DYNAMIC_EXECUTION]: The hunting methodology utilizes
ruby -eandpython3 -cwithin shell commands to dynamically generate long strings or parse URIs, specifically for testing Regular Expression Denial of Service (ReDoS) vulnerabilities. - [DATA_EXFILTRATION]: The skill contains demonstration payloads that use
curlto send data to external, non-whitelisted domains such asattacker.comandevil.com. These are presented as examples for testing Server-Side Request Forgery (SSRF) and token exfiltration vulnerabilities.
Audit Metadata