hunt-open-redirect
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands intended to be executed by the user for reconnaissance and vulnerability validation.
- Evidence: Multiple code blocks use standard utilities like
curl,grep,cat, andxargsto interact with remote targets and process local data files. - [EXTERNAL_DOWNLOADS]: The automation section suggests installing external third-party security tools.
- Evidence: The skill includes the command
pip3 install openredirexand references thenucleiscanning engine. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for processing untrusted data (crawled URLs) which could contain malicious payloads designed to influence shell execution or agent behavior.
- Ingestion points:
recon/$TARGET/urls.txt(SKILL.md). - Boundary markers: None mentioned.
- Capability inventory: Shell command execution (
bash), network operations (curl), and package installation (pip3). - Sanitization: No explicit sanitization or validation of the input URL list is described before it is passed to shell pipes.
Audit Metadata