bola-idor
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [SAFE]: The skill functions as a documentation and methodology guide for security testing. It provides educational content and remediation patterns aligned with the OWASP Web Security Testing Guide (WSTG).- [COMMAND_EXECUTION]: The skill includes command-line templates for curl and ffuf. These are intended for security research and use explicit placeholders like TARGET, YOUR_TOKEN, and VICTIM_ID, ensuring they are not executed blindly.- [METADATA_POISONING]: Metadata correctly identifies the skill's purpose, category, and source (OWASP), matching the actual content provided in the instructions.
Audit Metadata