hunt-file-upload
Warn
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install an external package named
evilarcusingpip3 install evilarc. This tool is used for generating archives with path traversal vulnerabilities. - [COMMAND_EXECUTION]: Multiple shell commands are provided to generate exploit payloads locally, such as creating SSRF trigger files via
cat > /tmp/ssrf.mvgandcat > /tmp/ssrf.m3u8, as well as creating malicious archives withzipandtar. - [DATA_EXFILTRATION]: The skill includes specific payloads designed to exfiltrate sensitive information, including local system files (e.g.,
/etc/passwd) and cloud environment credentials from the AWS Instance Metadata Service (169.254.169.254). - [REMOTE_CODE_EXECUTION]: Instructions are provided for generating and testing remote code execution vectors, such as shell upload bypasses, PHP polyglots, and zip-slip attacks. It also references external PoC code for heap overflow vulnerabilities (CVE-2023-4863).
Audit Metadata