hunt-fintech-graphql
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Documentation Only
- The skill is comprised of markdown instructions and informational payloads intended for security research.
- It explicitly states that helper scripts and commands are not bundled, preventing any automated execution of the described techniques.
- [SAFE]: Operational Safety
- The skill includes a mandatory confirmation gate requiring the agent to verify authorization, scope, and target details with the user before any active testing can proceed.
- Clear warnings regarding authorized use and legal compliance are prominently displayed at the start of the document.
- [SAFE]: No Malicious Patterns Detected
- A comprehensive scan for prompt injection, data exfiltration, obfuscation, and unauthorized remote code execution patterns returned no findings.
- The example command provided (
cat scope.txt) is a standard practice for verifying testing scope and does not target sensitive system files.
Audit Metadata