attack-methods-lookup
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a searchable knowledge base for web application security. It provides structured information on vulnerabilities, indicators, and testing methodologies for educational and research purposes.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted security resources including OWASP, MITRE (CWE), PortSwigger, and HackerOne. These references are used for documentation and further reading.
- [COMMAND_EXECUTION]: The workflow instructions demonstrate the use of standard system tools like
catandjqto query the skill's own local data files (owasp-index.jsonandform-vulns-index.json). This is a legitimate and safe pattern for navigating the skill's internal datasets. - [DATA_EXPOSURE]: Although the data files contain strings representing attack payloads (such as XSS and SQL injection), these are provided as text data for the user's reference. There is no evidence of the skill attempting to access sensitive local files or exfiltrate user data.
Audit Metadata