web-ssti
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and technical resource for penetration testing and bug hunting. While it contains payloads for remote code execution (RCE), these are intended for testing target web applications as data input and are not executed by the skill or the agent itself.
- [SAFE]: No obfuscation, data exfiltration, or persistence mechanisms were found. The metadata accurately reflects the content's purpose and scope.
- [SAFE]: The defensive section includes a Sigma rule for logging and monitoring, which is a standard security practice. All mentioned tools (tplmap, burp) are industry-standard security software.
Audit Metadata