ffuf-claude-skill
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of instructional markdown text and does not include any executable scripts, binaries, or shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses potential injection from untrusted user targets through a mandatory confirmation process. 1. Ingestion points: User-provided target URLs and resources mentioned in the instructions. 2. Boundary markers: Explicit requirement for written authorization and a mandatory wait for human confirmation before any network traffic is sent. 3. Capability inventory: Execution of 'ffuf' for web fuzzing operations. 4. Sanitization: No explicit code-level sanitization is described in the text, as it relies on a human-in-the-loop confirmation gate as the primary security control.
- [SAFE]: No other security threats such as prompt injection, credential exposure, or obfuscation were identified during the analysis.
Audit Metadata