gobuster
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash command templates for the Gobuster utility to perform discovery and reconnaissance tasks such as directory and virtual host enumeration.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by interpolating untrusted data (targets and wordlist paths) into shell commands.
- Ingestion points: Target URLs, domains, and wordlist file paths provided as inputs (SKILL.md).
- Boundary markers: No delimiters or isolation markers are present to separate untrusted input from the command structure.
- Capability inventory: The skill allows the execution of the gobuster CLI tool with variable arguments (SKILL.md).
- Sanitization: No input validation, escaping, or sanitization processes are defined for the parameters used in the commands.
Audit Metadata