hunt-subdomain
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and tactical methodologies for identifying subdomain takeovers. The instructions and scripts are consistent with professional security research and do not contain malicious intent or hidden payloads.
- [EXTERNAL_DOWNLOADS]: The skill mentions common security tools (subfinder, amass, assetfinder, dnsx, nuclei, subjack) from reputable sources. These are standard tools used in the bug bounty and security auditing communities.
- [COMMAND_EXECUTION]: The skill provides command-line examples for DNS resolution (dig, dnsx) and HTTP probing (curl, nuclei). These are intended for authorized security testing and do not represent unauthorized command execution against the agent's environment.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No evidence of hardcoded credentials or unauthorized data access was found. Placeholders used in examples are generic and do not leak sensitive information.
Audit Metadata