web-mfa-bypass
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes techniques for manipulating untrusted application responses and structured data to bypass security logic.
- Ingestion points: Application-provided data such as JSON flags (e.g., 'mfa_required'), HTTP headers, and status codes.
- Boundary markers: None specified in the instructional text.
- Capability inventory: The skill assumes the use of external security tools like Burp Suite and Turbo Intruder to intercept and modify traffic.
- Sanitization: There are no instructions for validating or sanitizing manipulated data before it is processed.
- [NO_CODE]: The skill folder consists solely of instructional markdown documentation and metadata, containing no scripts, binaries, or automated shell commands.
Audit Metadata