payloads-websocket

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides links to external security tools hosted on GitHub and GitHub Gists, including 'wsrepl', 'ws-harness.py', and 'socketsleuth'. These are well-recognized tools within the security research community.
  • [COMMAND_EXECUTION]: Contains command-line examples for installing security tools via package managers (e.g., 'pip install wsrepl') and running Python-based auditing scripts. These are presented as instructions for a human operator or the agent to assist in a pentesting context.
  • [SAFE]: The inclusion of exploit payloads (such as Cross-Site WebSocket Hijacking templates) is consistent with the skill's stated purpose as a reference for penetration testing. These snippets are informational data for testing purposes and do not represent a malicious intent or hidden behavior by the skill itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 04:16 AM