hunt-ato

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous command-line examples using standard security tools such as curl, ffuf, and hashcat. These snippets are designed for security professionals to test for vulnerabilities like Host-header injection, predictable reset tokens, and SSO misconfigurations within an authorized scope.
  • [DYNAMIC_EXECUTION]: Includes an inline Python command (python3 -c) used to generate sample JSON Web Tokens (JWT) for demonstrating authentication bypass techniques (e.g., alg:none).
  • [SAFE]: The skill features a robust 'Mandatory confirmation gate' and clear legal disclaimers requiring explicit written authorization before any active probing. The content is strictly educational and documentation-focused, consistent with its stated purpose as a security research tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 08:16 AM