hunt-ato
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous command-line examples using standard security tools such as
curl,ffuf, andhashcat. These snippets are designed for security professionals to test for vulnerabilities like Host-header injection, predictable reset tokens, and SSO misconfigurations within an authorized scope. - [DYNAMIC_EXECUTION]: Includes an inline Python command (
python3 -c) used to generate sample JSON Web Tokens (JWT) for demonstrating authentication bypass techniques (e.g., alg:none). - [SAFE]: The skill features a robust 'Mandatory confirmation gate' and clear legal disclaimers requiring explicit written authorization before any active probing. The content is strictly educational and documentation-focused, consistent with its stated purpose as a security research tool.
Audit Metadata