ffuf
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the ffuf tool binary and the SecLists wordlist collection from their official repositories on GitHub.
- [COMMAND_EXECUTION]: The skill provides numerous examples for executing the ffuf command-line tool to perform security testing, directory discovery, and API fuzzing.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by processing data from external web servers during fuzzing operations.
- Ingestion points: Web server response headers and bodies are processed by ffuf and potentially reviewed by the agent (SKILL.md).
- Boundary markers: None identified in the instructions for handling tool output.
- Capability inventory: Executes shell commands (ffuf), clones repositories (git), and writes results to local JSON files (
-o results.json). - Sanitization: No specific sanitization or validation of the remote server responses is defined before the agent processes them.
Audit Metadata