hunt-cache-poison

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONNO_CODE
Full Analysis
  • [SAFE]: The skill serves as a comprehensive educational resource for security professionals and bug bounty hunters. It describes common web vulnerabilities and provides a structured approach for testing them within an authorized scope.
  • [COMMAND_EXECUTION]: The skill provides several curl command templates (e.g., curl -s -H "X-Forwarded-Host: evil.attacker.com" "https://target.com/page") designed to probe web servers for cache misconfigurations. These are legitimate tools for the skill's stated purpose and are preceded by explicit safety warnings and a requirement for user confirmation of authorization and scope.
  • [NO_CODE]: The skill is entirely documentation-based and does not package, download, or execute any external scripts, binaries, or language-specific dependencies (such as npm or pip packages).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 08:17 AM