Skills
Navigate
skills/sickn33/agentic-awesome-skills/hunt-http-smuggling/Gen Agent Trust Hub

hunt-http-smuggling

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied target identifiers which are interpolated into execution contexts.
  • Ingestion points: User-provided target URL or IP address defined in the mandatory confirmation gate in SKILL.md.
  • Boundary markers: A strict confirmation gate is present, requiring the agent to display the command and wait for user approval.
  • Capability inventory: Network requests via curl and environment management via docker-compose in references/phase2h-smuggling-cachepoison.md.
  • Sanitization: The skill does not explicitly describe sanitization of the target variables before interpolation into shell commands.
  • [COMMAND_EXECUTION]: The skill documents shell commands for vulnerability verification and lab setup.
  • Evidence: Manual testing commands using curl and container orchestration using docker-compose in references/phase2h-smuggling-cachepoison.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 08:15 AM