recon-content-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions do not contain any malicious patterns or unauthorized behaviors. It functions as a guide for legitimate penetration testing and bug bounty reconnaissance activities.
- [COMMAND_EXECUTION]: The skill references standard command-line tools for security testing (feroxbuster, ffuf, katana, gau, arjun, gospider). These references are within the context of the skill's stated purpose and do not represent arbitrary or malicious command execution.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive file path accesses were found. The skill targets external web hosts for directory and parameter discovery, which is consistent with its intended use-case.
- [INDIRECT_PROMPT_INJECTION]: While the skill takes a target URL as input, it does not process untrusted data in a way that could lead to command injection or agent subversion. Standard safety boundaries apply.
Audit Metadata