burp-headless
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and workflow examples for integrating Burp Suite Professional and Enterprise editions into CI/CD pipelines. All external references point to official PortSwigger domains (
portswigger.net). - [SAFE]: The provided GitHub Actions example follows security best practices by using GitHub Secrets (
${{ secrets.BURP_ENT_URL }},${{ secrets.BURP_ENT_TOKEN }}) for sensitive credentials rather than hardcoding them. - [SAFE]: The skill includes an 'Anti-patterns' section that explicitly warns against common security and operational risks, such as running scans against production environments or using unreviewed extensions.
- [SAFE]: The REST API interactions (Steps 2 and 3) are standard implementations for headless tool control and do not demonstrate malicious patterns.
Audit Metadata