web-request-smuggling
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for HTTP request smuggling (desync) attacks. It provides educational content on CL.TE and TE.CL vulnerabilities.
- [SAFE]: The included Sigma rule is a standard defensive detection pattern for identifying ambiguous HTTP headers in web server logs and does not contain any malicious logic.
- [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscation was found. The skill describes security tools like Burp Suite which are standard for the 'bugbounty' mode specified in the metadata.
- [SAFE]: There are no remote code downloads, package installations, or dynamic code execution patterns identified in the markdown files.
Audit Metadata